FG
💻 Software

Do both lsmod and /proc/modules use the same mechanism to retrieve modules?

Fresh5 days ago
Mar 15, 20265683 views
Confidence Score0%
0%

Problem

I can get a list of modules using either or . Do the two approaches use the same mechanism to retrieve the modules? I want to know this as we could use it to find some hidden malicious modules.

Error Output

lsmod

Unverified for your environment

Select your OS to check compatibility.

1 Fix

Canonical Fix
Unverified Fix
New Fix – Awaiting Verification

Fix for: Do both lsmod and /proc/modules use the same mechanism to retrieve modules?

Low Risk

They are both reading the same kernel interface to produce the list. However, a rootkit may alter lsmod to hide modules but there are myriad ways to read /proc/modules that would be near impossible for a rootkit to modify all of them. If you're doin…

Awaiting Verification

Be the first to verify this fix

Sign in to verify this fix

Environment