Lucene search

K
zdiManuel Blanco Parajรณn; Eloi SanfelixZDI-23-441
HistoryApr 13, 2023 - 12:00 a.m.

Linux Kernel udmabuf Improper Validation of Array Index Local Privilege Escalation Vulnerability

2023-04-1300:00:00
Manuel Blanco Parajรณn; Eloi Sanfelix
www.zerodayinitiative.com
19
linux kernel
udmabuf
array index
local privilege escalation
vulnerability
validation
user-supplied data
memory access
arbitrary code
kernel

0.001 Low

EPSS

Percentile

39.6%

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.