漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Sentry kernel has incomplete ownership check for IRQ line manipulation
Vulnerability Description
The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the __sys_int_* syscall familly. Prior to version 0.4.7, this can lead to DoS and covert-channels between this task and the outer world. A patch is available in version 0.4.7. As a workaround, reduce tasks that have the DEV and IO capability to a single one.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
Vulnerability Type
未经验证的属主
Vulnerability Title
Sentry kernel 安全漏洞
Vulnerability Description
Sentry kernel是camelot-os开源的一个用于高安全嵌入式系统的微内核实现。 Sentry kernel 0.4.7之前版本存在安全漏洞,该漏洞源于具有DEV或IO能力的任务可通过__sys_int_*系统调用族与另一任务的IRQ线交互,可能导致拒绝服务和隐蔽信道。
CVSS Information
N/A
Vulnerability Type
N/A