An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits within mmu_flags_to_s1_pte_attr lead to unprivileged executable pages being mapped as executable from a privileged context. This can be leveraged by an attacker to bypass executability restrictions of user-mode pages from kernel-mode. Typically this allows a potential attacker to circumvent a mitigation, making exploitation of potential kernel-mode vulnerabilities easier. We recommend updating kernel beyond commit 7d731b4e9599088ac3073956933559da7bca6a00 and rebuilding.
References
| Link | Resource |
|---|---|
| https://fuchsia.googlesource.com/fuchsia/+/7d731b4e9599088ac3073956933559da7bca6a00 | Mailing List Patch Third Party Advisory |
Configurations
History
25 Oct 2022, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-732 |
25 Jan 2022, 20:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://fuchsia.googlesource.com/fuchsia/+/7d731b4e9599088ac3073956933559da7bca6a00 - Mailing List, Patch, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
| CPE | cpe:2.3:o:google:fuchsia:-:*:*:*:*:*:*:* | |
| First Time |
Google
Google fuchsia |
|
| CWE | CWE-287 |
18 Jan 2022, 14:33
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-18 14:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-22566
Mitre link : CVE-2021-22566
CVE.ORG link : CVE-2021-22566
JSON object : View
Products Affected
- fuchsia