syscall.sh / arm64 / memfd_secret
memfd_secret
create an anonymous RAM-based file to access secret memory regions
sys_memfd_secret(unsigned int flags)
| number | 447 (0x1bf) |
|---|---|
| abi | memfd_secret |
| entry point | sys_memfd_secret |
| since | Linux 5.14 |
| man page | memfd_secret(2) |
| source | elixir.bootlin.com |
Registers
| register | value |
|---|---|
x8 | 447, the syscall number |
x0 | unsigned int flags |
x0 | the return value |
Then run svc #0 to enter the kernel.
Same syscall on other architectures
Get this as JSON: https://api.syscall.sh/v2/syscalls/arm64/memfd_secret