kernel-uaccess-safety

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security
SecurityMEDIUM
examples/bad/bad_access_ok.c

No evidence of malware, backdoor, or exfiltration behavior. The fragment is a targeted security-reproducible bug: it performs a __copy_from_user-like copy from an unvalidated `__user` pointer without an access_ok gate, and the harness confirms the copy succeeds even with a kernel pointer cast to `__user`. In a real kernel/module context, this pattern is security-relevant because it can undermine memory-access authorization and potentially lead to information disclosure or memory-safety issues.

Confidence: 80%Severity: 70%
Audit Metadata
Analyzed At
Sep 3, 2026, 10:03 AM
Package URL
pkg:socket/skills-sh/trothbyte%2Flow-level-skills-trothbyte%2Fkernel-uaccess-safety%2F@659457bc41a24d6c7fc3566b6e0ddf717bc025aab392b46b472a91ce6b435dd0