Description
The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
References (5)
Scores
CVSS v3
7.8
EPSS
0.0009
EPSS Percentile
25.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-697
Status
published
Products (2)
zephyrproject/zephyr
1.14.2
zephyrproject/zephyr
2.1.0
Published
May 11, 2020
Tracked Since
Feb 18, 2026