Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Stuartlyo

#25369of 53,622
9.8Total CVSS
Vulnerabilities · 1
PT-2018-9526
9.8
2018-09-06
Linux Foundation · Zephyr Rtos · CVE-2018-1000800
**Name of the Vulnerable Software and Affected Versions** zephyr-rtos version 1.12.0 **Description** The issue is related to a NULL base pointer reference in the `sys ring buf put()` and `sys ring buf get()` functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a malicious application calling the vulnerable kernel APIs, specifically `sys ring buf get()` and `sys ring buf put()`. **Recommendations** For zephyr-rtos version 1.12.0, consider restricting access to the `sys ring buf get()` and `sys ring buf put()` functions until a patch is available. As a temporary workaround, avoid using these functions in applications to minimize the risk of exploitation.