PT-2023-8934 · Unknown · Freertos Kernel

David Reiss + 10 · Publicado 2023-11-29 · Atualizado 2024-10-01 · CVE-2024-28115

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeRTOS Kernel versions through 10.6.1

Description The issue is related to insufficient protection against local privilege escalation via Return Oriented Programming techniques, should a vulnerability exist that allows code injection and execution. This affects ARMv7-M MPU ports and ARMv8-M ports with Memory Protected Unit (MPU) support enabled, i.e., configENABLE MPU set to 1.

Recommendations For FreeRTOS Kernel versions through 10.6.1, update to version 10.6.2, which includes a new MPU wrapper to fix the issue. As a temporary workaround, consider disabling the configENABLE MPU to minimize the risk of exploitation. Restrict access to the affected ARMv7-M MPU ports and ARMv8-M ports with Memory Protected Unit (MPU) support enabled to reduce the attack surface.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2024-02730

CVE-2024-28115

GHSA-XCV7-V92W-GQ6R

Produtos afetados

Freertos Kernel

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28115.json · Exploit
• https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-xcv7-v92w-gq6r · Aviso do Fabricante
• https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.6.2 · Nota
• https://osv.dev/vulnerability/CVE-2024-28115 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2024-28115 · Nota de Segurança
• https://vuldb.com/?id.256095 · Nota
• https://twitter.com/CVEnew/status/1765848461281292310 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-02730 · Nota de Segurança
• https://t.me/cvenotify/96699 · Publicação no Telegram
• https://freertos.org/security/kernel-threat-model.html · Nota