CVE-2013-6282—Linux Kernel Improper Input Validation Vulnerability

漏洞名称

Linux Kernel Improper Input Validation Vulnerability

描述

The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8404663f81d212918ff85f493649a7991209fa04
• https://nvd.nist.gov/vuln/detail/CVE-2013-6282

相关 CWE

• CWE-20