Skip to content
OpenAdvisories
High · 7.8 CVE-2020-10058 EUVD-2020-2523GHSA-gmhq-vm7x-p5c3

Multiple Syscalls In kscan Subsystem Performs No Argument Validation

Published May 11, 2020 · Updated Sep 17, 2024 · Assigned by zephyr

Description

Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.

Affected products

VendorProductAffectedFixed
zephyrproject-rtos zephyr 2.1.0 – < unspecified unspecified

References