high7.8
CVE-2020-10058
Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges.
Impact
Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zephyrproject | Zephyr | Version 2.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10058
- https://github.com/zephyrproject-rtos/zephyr/pull/23308
- https://github.com/zephyrproject-rtos/zephyr/pull/23748
- https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-34
- https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10058
- https://github.com/zephyrproject-rtos/zephyr/pull/23308
- https://github.com/zephyrproject-rtos/zephyr/pull/23748
- https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-34