Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers
Vulnerability Description
An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
不充分的比较
Vulnerability Title
Zephyr 安全漏洞
Vulnerability Description
Zephyr是美国Linux基金会的一套开源的小型的可缩放的实时操作系统。 Zephyr 1.14.0及之后版本（1.14.2版本已修复）和2.1.0及之后版本（2.2.0版本已修复）中存在安全漏洞。攻击者可利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A