ExploitPublished
Parrot and DJI variants Drone OSes · Kernel Panic Exploit
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 21 Jun 2025, 23:58 UTC
What to do
AI-suggested
- Implement strict physical security controls to prevent unauthorized local access to drones, including secure storage and transport protocols.
- Monitor and restrict access to drone management interfaces and connected devices to minimize the risk of local exploitation.
- Conduct regular firmware and OS integrity checks on drones to detect unauthorized modifications or signs of exploitation.
- Collaborate with Parrot and DJI to obtain and apply any forthcoming patches or firmware updates addressing this kernel panic vulnerability.
- Employ network segmentation and secure communication channels for drone control systems to reduce the risk of lateral movement if local access is compromised.
- Train personnel on the risks of local exploits and enforce policies that limit the use of untrusted devices or software in proximity to drone systems.
- Consider deploying intrusion detection systems capable of identifying abnormal drone behavior indicative of kernel panics or crashes.
Description
Parrot and DJI variants Drone OSes - Kernel Panic Exploit
Indicators of compromise
Exploit source code
#!/usr/bin/env python3
# Exploit Title: Parrot and DJI variants Drone OSes - Kernel Panic Exploit
# Author: Mohammed Idrees Banyamer
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Date: 2025-06-10
# Tested on: Parrot QRD, Parrot Alpha-M, DJI QRD, DJI Alpha-M
# CVE: CVE-2025-37928
# Type: Local Privilege Escalation / Kernel Panic
# Platform: Linux-based drone OS (Parrot and DJI variants)
# Author Country: Jordan
# CVSS v3.1 Score: 7.3 (Important)
# Weakness: CWE-284: Imp…References
Community reviews
Loading reviews…