Parrot and DJI variants Drone OSes · Kernel Panic Exploit
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 21 Jun 2025, 23:58 UTC
What to do
AI-suggested
1. Implement strict physical security controls to prevent unauthorized local access to drones, including secure storage and transport protocols. 2. Monitor and restrict access to drone management interfaces and connected devices to minimize the risk of local exploitation. 3. Conduct regular firmware and OS integrity checks on drones to detect unauthorized modifications or signs of exploitation. 4. Collaborate with Parrot and DJI to obtain and apply any forthcoming patches or firmware updates addressing this kernel panic vulnerability. 5. Employ network segmentation and secure communication channels for drone control systems to reduce the risk of lateral movement if local access is compromised. 6. Train personnel on the risks of local exploits and enforce policies that limit the use of untrusted devices or software in proximity to drone systems. 7. Consider deploying intrusion detection systems capable of identifying abnormal drone behavior indicative of kernel panics or crashes.
Description
Parrot and DJI variants Drone OSes - Kernel Panic Exploit
Indicators of compromise
Exploit source code
#!/usr/bin/env python3
# Exploit Title: Parrot and DJI variants Drone OSes - Kernel Panic Exploit
# Author: Mohammed Idrees Banyamer
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Date: 2025-06-10
# Tested on: Parrot QRD, Parrot Alpha-M, DJI QRD, DJI Alpha-M
# CVE: CVE-2025-37928
# Type: Local Privilege Escalation / Kernel Panic
# Platform: Linux-based drone OS (Parrot and DJI variants)
# Author Country: Jordan
# CVSS v3.1 Score: 7.3 (Important)
# Weakness: CWE-284: Imp…