Code injection

An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...

CVE-2021-22566

The CVE concerns the Fuchsia kernel. An incorrect setting of UXN and PXN bits in mmu_flags_to_s1_pte_attr can cause privileged executable kernel-mode pages to be mapped as executable from user mode, and unprivileged pages to be treated as executable from kernel mode. This misuse can bypass execut...