Seccomp denylist bypass via 32-bit argument truncation
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
62
Product
systemd
- Mentions · 7d1
- Mentions · 30d1
- All mentions3
- First seenSep 4, 2026
- Last mentioned3d ago
Timeline
3 articles · newest firstUnderstanding NvPCRs in systemd v262
A deep dive explains systemd v262 NvPCRs, extra TPM registers for measurement and attestation.
36
TPMSpy: Validation of Measured Boot Systems by Low-Level Tracing of TPM Usage
Researchers present TPMSpy, a platform-agnostic method validating TPM Measured Boot via low-level tracing, finding inconsistent Linux systemd measurements that break remote attestation and LUKS decryption.
40
Appears with
- QEMUproduct · 1
- LUKSproduct · 1
- Microsoftvendor · 1
- containerdproduct · 1
- Linux Foundationorganization · 1
- Podmanproduct · 1
- TPMSpyproduct · 1
- Microsoftorganization · 1
- Linux Foundationvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.