Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-10058

Multiple Syscalls In kscan Subsystem Performs No Argument Validation

Description

Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos zephyr

  • 2.1.0 to < unspecifiedaffected

References