Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-0882 EUVD-2022-15918GHSA-gqmg-mqmp-6h9h

Illegal access to Kernel log in Fuchsia

Published May 3, 2022 · Updated Apr 21, 2025 · Assigned by Google

Description

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.

Affected products

VendorProductAffectedFixed
Google Fuchsia Kernel unspecified – < 4.1.1 4.1.1

References