[PATCH 2/2] riscv: Sanitize syscall table indexing under speculation

Paul Walmsley pjw at kernel.org
Tue Dec 30 19:01:20 PST 2025


On Thu, 18 Dec 2025, Lukas Gerlach wrote:

> The syscall number is a user-controlled value used to index into the
> syscall table. Use array_index_nospec() to clamp this value after the
> bounds check to prevent speculative out-of-bounds access and subsequent
> data leakage via cache side channels.
> 
> Signed-off-by: Lukas Gerlach <lukas.gerlach at cispa.de>

Thanks, queued for v6.19-rc.


- Paul



More information about the linux-riscv mailing list