- Symlinks are sometimes created with the sticky bit set.
- The kshell drops keystrokes now and then.
- Some devices accept lseek() when it's not meaningful.
- sethostname() does not seem to work.
- Some system calls in some cases don't verify user-supplied pointers correctly and thus can be used to crash or compromise the system.
- Processes' user-level heaps (data allocated with malloc) hang around, unmapped, after exec. This is actually less serious than you might think, which is why we haven't fixed it yet.
- If you remove a file that is mapped into memory but not open, the kernel panics.