From c1632c271c2eb34d96743d0fdc9f3e7bf5f52e01 Mon Sep 17 00:00:00 2001
From: SimonFair <39065407+SimonFair@users.noreply.github.com>
Date: Mon, 24 Nov 2025 23:01:22 +0000
Subject: [PATCH] escape module.

---
 emhttp/plugins/dynamix/include/SriovHelpers.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/emhttp/plugins/dynamix/include/SriovHelpers.php b/emhttp/plugins/dynamix/include/SriovHelpers.php
index d11170f1d..b4954ef78 100644
--- a/emhttp/plugins/dynamix/include/SriovHelpers.php
+++ b/emhttp/plugins/dynamix/include/SriovHelpers.php
@@ -175,7 +175,7 @@ function rebindVfDriver($vf, $sriov, $target = 'original')
     // Step 2: Load target driver if needed
     $target_bind = "/sys/bus/pci/drivers/$new_drv/bind";
     if (!file_exists($target_bind))
-        exec("modprobe $new_drv 2>/dev/null");
+        exec("modprobe " . escapeshellarg($new_drv) . " 2>/dev/null");
 
     // Step 3: Override driver binding
     if (is_writable($drv_override))