Conceptsyscall
System Call
An interface through which user-mode programs request kernel services. When handling system calls, the kernel must validate parameters passed from user space, such as pointers, lengths, and permissions; lapses in validation may lead to a breach of the privilege boundary.
Timeline (last 90 days)
Oct 15
When handling system calls, the kernel must strictly validate the parameters passed in by the user—including whether pointers point to user space, whether lengths are out of bounds, and whether permissions match. Once the validation logic of a system call has an oversight, a user-mode program may induce the kernel to perform privileged operations, thereby breaking through the boundary.
Unverified50%