Description
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | 3.1.0 – ≤ 3.1.4, 3.0.0 – ≤ 3.0.6, 1.1.0 – ≤ 1.1.5 | — |