Linux Foundation · Zephyr Rtos · CVE-2018-1000800
**Name of the Vulnerable Software and Affected Versions**
zephyr-rtos version 1.12.0
**Description**
The issue is related to a NULL base pointer reference in the `sys ring buf put()` and `sys ring buf get()` functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a malicious application calling the vulnerable kernel APIs, specifically `sys ring buf get()` and `sys ring buf put()`.
**Recommendations**
For zephyr-rtos version 1.12.0, consider restricting access to the `sys ring buf get()` and `sys ring buf put()` functions until a patch is available. As a temporary workaround, avoid using these functions in applications to minimize the risk of exploitation.