| Current Path : /proc/2568807/root/usr/share/systemtap/examples/security-band-aids/ |
| Current File : //proc/2568807/root/usr/share/systemtap/examples/security-band-aids/cve-2021-4155.stp |
// CVE-2021-4155 - kernel: xfs: raw block device data leak in ioctl(XFS_IOC_ALLOCSP
// Approach: intercept the xfs_alloc_file_space function. Replace
// the 0 unsafe alloc_type parameter.
probe module("xfs").function("xfs_alloc_file_space") {
if ($alloc_type == 0)
$alloc_type = 0x8; # XFS_BMAPI_PREALLOC
}