Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5937-rmjq-m7qm

Опубликовано: 18 сент. 2024
Источник: github
Github: Не прошло ревью

Описание

In the Linux kernel, the following vulnerability has been resolved:

riscv: misaligned: Restrict user access to kernel memory

raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

In the Linux kernel, the following vulnerability has been resolved:

riscv: misaligned: Restrict user access to kernel memory

raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

EPSS

Процентиль: 10%
0.00034
Низкий

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

CVSS3: 5.5
redhat
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

CVSS3: 3.3
nvd
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

CVSS3: 3.3
debian
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: r ...

CVSS3: 3.3
fstec
больше 1 года назад

Уязвимость функции handle_misaligned_load() модуля arch/riscv/kernel/traps_misaligned.c подсистемы управления модулями платформы с архитектурой RISC-V ядра операционной системы Linux, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 10%
0.00034
Низкий