Yizhou Zhao

The `ptrace(PT SC REMOTE)` function failed to properly validate parameters for the `syscall(2)` and ` syscall(2)` meta-system calls. This allows a user with debugging capabilities to trigger arbitrary code execution in the kernel, regardless of the target process's privileges. An unprivileged local user can exploit this to escalate privileges and potentially gain full control of the system.

An issue exists in the handling of RAW sockets using the `IPPROTO RAW` protocol. A malicious incoming ICMP packet can have its protocol field set to 255, allowing it to match a socket created with `socket(AF INET, SOCK RAW, 255)`. This can lead to unauthorized changes in the Forwarding Next Hop Exception (FNHE) cache.