CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

CVE-2021-25415

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable...

Samsung Mobile RKP 输入验证错误漏洞

Samsung RKP is a kernel protection mechanism from Samsung South Korea. A security vulnerability exists in Samsung Mobile RKP that stems from incorrect address validation in RKP prior to SMR JUN-2021 Release 1 that allows a local attacker to remap EL2 memory as writable...