Lucene search

K
vulnrichmentGoogleVULNRICHMENT:CVE-2021-22566
HistoryJan 18, 2022 - 2:10 p.m.

CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel

2022-01-1814:10:10
CWE-275
Google
github.com
11
fuchsia kernel
executable bits
uxn bits
pxn bits
privileged context
unprivileged context
kernel-mode vulnerabilities
user-mode vulnerabilities
kernel update

CVSS4

5.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:N/SA:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

43.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits within mmu_flags_to_s1_pte_attr lead to unprivileged executable pages being mapped as executable from a privileged context. This can be leveraged by an attacker to bypass executability restrictions of user-mode pages from kernel-mode. Typically this allows a potential attacker to circumvent a mitigation, making exploitation of potential kernel-mode vulnerabilities easier. We recommend updating kernel beyond commit 7d731b4e9599088ac3073956933559da7bca6a00 and rebuilding.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:google:fuchsia:-:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "fuchsia",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS4

5.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:N/SA:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

43.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2021-22566