CONFIG_HARDENED_USERCOPY: Harden memory copies between kernel and userspace

General informations

The Linux kernel configuration item CONFIG_HARDENED_USERCOPY:

• prompt: Harden memory copies between kernel and userspace
• type: bool
• depends on: (none)
• defined in security/Kconfig
• found in Linux kernels: 4.8–4.20, 5.0–5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

This option checks for obviously wrong memory regions when copying memory to/from the kernel (via copy_to_user() and copy_from_user() functions) by rejecting memory ranges that are larger than the specified heap object, span multiple separately allocated pages, are not on the process stack, or are part of the kernel text. This prevents entire classes of heap overflow exploits and similar kernel memory exposures.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: