Zephyr · Zephyr · CVE-2020-10024
**Name of the Vulnerable Software and Affected Versions**
zephyr versions 1.14.0 through 2.1.0 and later versions.
**Description**
The issue is related to the arm platform-specific code in zephyr, which uses a signed integer comparison when validating system call numbers. This allows an attacker with code execution within a user thread to elevate privileges to that of the kernel.
**Recommendations**
For zephyr versions 1.14.0 through 2.1.0 and later versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.