{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:PP6UIVPML2HZ7UD7VQD4TAJIIU","short_pith_number":"pith:PP6UIVPM","canonical_record":{"source":{"id":"2606.10290","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T01:28:45Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"959b95d68b49f4513891694805313cc3710885d1db5d6a32e229b46a3928376b","abstract_canon_sha256":"0f2b4b2c3c7e0c02eae76ef7fef3050ecf23d92bce2ceea8910ac20eae055923"},"schema_version":"1.0"},"canonical_sha256":"7bfd4455ec5e8f9fd07fac07c98128451c5694f806a68d54c993d2549e4db4ce","source":{"kind":"arxiv","id":"2606.10290","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.10290","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"arxiv_version","alias_value":"2606.10290v1","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.10290","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"pith_short_12","alias_value":"PP6UIVPML2HZ","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"pith_short_16","alias_value":"PP6UIVPML2HZ7UD7","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"pith_short_8","alias_value":"PP6UIVPM","created_at":"2026-06-10T01:10:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:PP6UIVPML2HZ7UD7VQD4TAJIIU","target":"record","payload":{"canonical_record":{"source":{"id":"2606.10290","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T01:28:45Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"959b95d68b49f4513891694805313cc3710885d1db5d6a32e229b46a3928376b","abstract_canon_sha256":"0f2b4b2c3c7e0c02eae76ef7fef3050ecf23d92bce2ceea8910ac20eae055923"},"schema_version":"1.0"},"canonical_sha256":"7bfd4455ec5e8f9fd07fac07c98128451c5694f806a68d54c993d2549e4db4ce","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-10T01:10:09.159144Z","signature_b64":"53Fh3/B3clcSEuC5Fs1SGpYZwv01dMN+Sge75rXMOtA8OCA6OPK7bb93lAQ49mFsogzexibb233cHXGzk4E8AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7bfd4455ec5e8f9fd07fac07c98128451c5694f806a68d54c993d2549e4db4ce","last_reissued_at":"2026-06-10T01:10:09.158067Z","signature_status":"signed_v1","first_computed_at":"2026-06-10T01:10:09.158067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.10290","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-10T01:10:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EEHBy89FK8luNLc/Yn7S1KrpiRfwOxLnushV33A3eZxxmBXUzZTnfDrmT4KWPuZYBqW281klQL325ReChArGBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T11:33:10.295886Z"},"content_sha256":"0dbcc95fbaa7e4a1924ef95b9a2e7d8110f6e85a04e0c7e580b901b873b81d83","schema_version":"1.0","event_id":"sha256:0dbcc95fbaa7e4a1924ef95b9a2e7d8110f6e85a04e0c7e580b901b873b81d83"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:PP6UIVPML2HZ7UD7VQD4TAJIIU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Linux IOCTL Census: A Source-Derived Database of the Linux Kernel Control-Code Surface","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Michael J. Bommarito II","submitted_at":"2026-06-09T01:28:45Z","abstract_excerpt":"The ioctl system call is Linux's catch-all device-control interface. A userspace program opens a device node and hands the driver a numeric command code and an argument buffer, and the driver does whatever that code means, whether configuring hardware, reading back state, or moving data into and out of the kernel. Drivers define these commands themselves, by the thousand, and parse their arguments in kernel context, which makes ioctl handlers one of the broadest and least uniform local attack surfaces in the kernel. A handler that trusts an argument length it never validates can read or write "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.10290","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.10290/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-10T01:10:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0XDuYzNnvnCUk59X3lkDufU4ZxDEPyIAppb09a7aSSDQkSQgI7+0Zc4gdYVqOs0+VgY1X5VyxGHxznwT7dlTDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T11:33:10.296271Z"},"content_sha256":"7a89a9380ff454c4a29e93484bd56770d17f3f4cc9092371167fde5be3c48e25","schema_version":"1.0","event_id":"sha256:7a89a9380ff454c4a29e93484bd56770d17f3f4cc9092371167fde5be3c48e25"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU/bundle.json","state_url":"https://pith.science/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-02T11:33:10Z","links":{"resolver":"https://pith.science/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU","bundle":"https://pith.science/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU/bundle.json","state":"https://pith.science/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PP6UIVPML2HZ7UD7VQD4TAJIIU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:PP6UIVPML2HZ7UD7VQD4TAJIIU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0f2b4b2c3c7e0c02eae76ef7fef3050ecf23d92bce2ceea8910ac20eae055923","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T01:28:45Z","title_canon_sha256":"959b95d68b49f4513891694805313cc3710885d1db5d6a32e229b46a3928376b"},"schema_version":"1.0","source":{"id":"2606.10290","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.10290","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"arxiv_version","alias_value":"2606.10290v1","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.10290","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"pith_short_12","alias_value":"PP6UIVPML2HZ","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"pith_short_16","alias_value":"PP6UIVPML2HZ7UD7","created_at":"2026-06-10T01:10:09Z"},{"alias_kind":"pith_short_8","alias_value":"PP6UIVPM","created_at":"2026-06-10T01:10:09Z"}],"graph_snapshots":[{"event_id":"sha256:7a89a9380ff454c4a29e93484bd56770d17f3f4cc9092371167fde5be3c48e25","target":"graph","created_at":"2026-06-10T01:10:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.10290/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The ioctl system call is Linux's catch-all device-control interface. A userspace program opens a device node and hands the driver a numeric command code and an argument buffer, and the driver does whatever that code means, whether configuring hardware, reading back state, or moving data into and out of the kernel. Drivers define these commands themselves, by the thousand, and parse their arguments in kernel context, which makes ioctl handlers one of the broadest and least uniform local attack surfaces in the kernel. A handler that trusts an argument length it never validates can read or write ","authors_text":"Michael J. Bommarito II","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T01:28:45Z","title":"The Linux IOCTL Census: A Source-Derived Database of the Linux Kernel Control-Code Surface"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.10290","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0dbcc95fbaa7e4a1924ef95b9a2e7d8110f6e85a04e0c7e580b901b873b81d83","target":"record","created_at":"2026-06-10T01:10:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0f2b4b2c3c7e0c02eae76ef7fef3050ecf23d92bce2ceea8910ac20eae055923","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-09T01:28:45Z","title_canon_sha256":"959b95d68b49f4513891694805313cc3710885d1db5d6a32e229b46a3928376b"},"schema_version":"1.0","source":{"id":"2606.10290","kind":"arxiv","version":1}},"canonical_sha256":"7bfd4455ec5e8f9fd07fac07c98128451c5694f806a68d54c993d2549e4db4ce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7bfd4455ec5e8f9fd07fac07c98128451c5694f806a68d54c993d2549e4db4ce","first_computed_at":"2026-06-10T01:10:09.158067Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-10T01:10:09.158067Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"53Fh3/B3clcSEuC5Fs1SGpYZwv01dMN+Sge75rXMOtA8OCA6OPK7bb93lAQ49mFsogzexibb233cHXGzk4E8AA==","signature_status":"signed_v1","signed_at":"2026-06-10T01:10:09.159144Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.10290","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0dbcc95fbaa7e4a1924ef95b9a2e7d8110f6e85a04e0c7e580b901b873b81d83","sha256:7a89a9380ff454c4a29e93484bd56770d17f3f4cc9092371167fde5be3c48e25"],"state_sha256":"c1a433d3d7b670d3d655dbdc42c8a400a2dbf4d50228f87b1731809e59008a73"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gEWL5aZfuZzzKcZFzWHW62q9fohP0psLmo3puUIXdYIYko8j3tlelGQ1FY7BxsbNh9ydnn8MLGhAs6vVrqfpAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-02T11:33:10.298915Z","bundle_sha256":"a932681f2bd812dbe9226418b3622a19a03e67afa413fc4c0cd8146fb6751ff6"}}