Seccomp denylist bypass via 32-bit argument truncation
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
62
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
Today 1.2K readers · 1.9K views · 1.5K reads · all time 160K views