kernel-uaccess-safety
Warn
Audited by Socket on Sep 3, 2026
1 alert found:
SecuritySecurityexamples/bad/bad_access_ok.c
MEDIUMSecurityMEDIUM
examples/bad/bad_access_ok.c
No evidence of malware, backdoor, or exfiltration behavior. The fragment is a targeted security-reproducible bug: it performs a __copy_from_user-like copy from an unvalidated `__user` pointer without an access_ok gate, and the harness confirms the copy succeeds even with a kernel pointer cast to `__user`. In a real kernel/module context, this pattern is security-relevant because it can undermine memory-access authorization and potentially lead to information disclosure or memory-safety issues.
Confidence: 80%Severity: 70%
Audit Metadata