syscall.sh / x32 / memfd_secret

memfd_secret

create an anonymous RAM-based file to access secret memory regions

sys_memfd_secret(unsigned int flags)

number	1073742271 (0x400001bf)
abi	common
entry point	`sys_memfd_secret`
since	Linux 5.14
man page	memfd_secret(2)
source	elixir.bootlin.com

Registers

register	value
`rax`	1073742271, the syscall number
`rdi`	unsigned int flags
`rax`	the return value

Then run syscall to enter the kernel.

Same syscall on other architectures

x64 447
x86 447
arm64 447
riscv64 447
loongarch64 447
s390x 447

Get this as JSON: https://api.syscall.sh/v2/syscalls/x32/memfd_secret