Code injection

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2019-20172

CVE-2019-20172 affects SerenityOS (pre-2019-12-30). The vulnerability is in Kernel/VM/MemoryManager.cpp where syscalls with pointers into kernel-only virtual address space are not rejected, enabling a local attacker to gain privileges by overwriting a return address found on the kernel stack. Imp...