PT-2021-23999 · Freertos · Freertos

Published 2021-11-17 · Updated 2022-10-12 · CVE-2021-43997

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FreeRTOS versions 10.2.0 through 10.4.5 FreeRTOS versions through 10.4.6

Description: The issue affects FreeRTOS on ARMv7-M and ARMv8-M MPU platforms, where non-kernel code can call internal functions to raise privilege. This can lead to privilege escalation by a third party that has already gained the ability to execute injected code. The issue is fixed in version 10.5.0 and in version 10.4.3-LTS Patch 3 for the LTS branch.

Recommendations: For FreeRTOS versions 10.2.0 through 10.4.5, update to version 10.5.0 or apply the patch from version 10.4.3-LTS Patch 3 to fix the issue. For FreeRTOS versions through 10.4.6, update to version 10.5.0 to prevent further privilege escalation. As a temporary workaround, consider restricting access to the xPortRaisePrivilege and vPortResetPrivilege internal functions until a patch is available.

Fix

Related Identifiers

CVE-2021-43997

Affected Products

Freertos

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-43997 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43997 · Vendor Advisory
• https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.4.6 · Note
• https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.5.0 · Note
• https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.4.3-LTS-Patch-3 · Note
• https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V10.4.3-LTS-Patch-2 · Note
• https://t.me/cibsecurity/32584 · Telegram Post