Merge pull request #2017 from mmadersbacher/fix/capabilities-pre-63-kernels

Fix capabilities plugin on kernels before 6.3
This commit is contained in:
ikelos
2026-08-19 15:14:19 +01:00
committed by GitHub
@@ -2375,9 +2375,8 @@ class kernel_cap_t(kernel_cap_struct):
# In kernels >= 6.3 kernel_cap_t::val is a u64
cap_value = self.val
else:
raise exceptions.VolatilityException(
"Unsupported kernel capabilities implementation"
)
# Before 6.3 kernel_cap_t is a typedef of kernel_cap_struct
return super().get_capabilities()
return cap_value & self.get_kernel_cap_full()