Lucene search

K
androidUnknown, used in vroot exploitANDROID:QUALCOMM_MISSING_CHECKS_PUT_USER_GET_USER
HistorySep 06, 2013 - 12:00 a.m.

Qualcomm missing checks put_user get_user

2013-09-0600:00:00
Unknown, used in vroot exploit
www.androidvulnerabilities.org
40

0.024 Low

EPSS

Percentile

89.9%

Missing access checks in put_user/get_user kernel API (CVE-2013-6282 QCIR-2013-00010-1): The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This functionality was originally implemented and controlled by the domain switching feature (CONFIG_CPU_USE_DOMAINS), which has been deprecated due to architectural changes. As a result, any kernel code using these API functions may introduce a security issue where none existed before. This allows an application to read and write kernel memory to, e.g., escalated privileges.