Skip to main content
ExploitPublished

Parrot and DJI variants Drone OSes · Kernel Panic Exploit

Source Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 21 Jun 2025, 23:58 UTC

What to do

AI-suggested

1. Implement strict physical security controls to prevent unauthorized local access to drones, including secure storage and transport protocols. 2. Monitor and restrict access to drone management interfaces and connected devices to minimize the risk of local exploitation. 3. Conduct regular firmware and OS integrity checks on drones to detect unauthorized modifications or signs of exploitation. 4. Collaborate with Parrot and DJI to obtain and apply any forthcoming patches or firmware updates addressing this kernel panic vulnerability. 5. Employ network segmentation and secure communication channels for drone control systems to reduce the risk of lateral movement if local access is compromised. 6. Train personnel on the risks of local exploits and enforce policies that limit the use of untrusted devices or software in proximity to drone systems. 7. Consider deploying intrusion detection systems capable of identifying abnormal drone behavior indicative of kernel panics or crashes.

Description

Parrot and DJI variants Drone OSes - Kernel Panic Exploit

Indicators of compromise

Exploit source code

Exploit code for Parrot and DJI variants Drone OSes - Kernel Panic ExploitC/C++ · 7,215 characters
#!/usr/bin/env python3
# Exploit Title: Parrot and DJI variants Drone OSes - Kernel Panic Exploit
# Author: Mohammed Idrees Banyamer
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Date: 2025-06-10
# Tested on: Parrot QRD, Parrot Alpha-M, DJI QRD, DJI Alpha-M
# CVE: CVE-2025-37928
# Type: Local Privilege Escalation / Kernel Panic
# Platform: Linux-based drone OS (Parrot and DJI variants)
# Author Country: Jordan
# CVSS v3.1 Score: 7.3 (Important)
# Weakness: CWE-284: Imp…

References

Community reviews

Loading reviews…