Threats Tagged 'ghsa-9rpr-c8j9-pwgc'

A vulnerability in the Linux kernel's openrisc architecture was resolved that allowed arbitrary kernel memory access via the or1k_atomic syscall. The syscall swaps words pointed to by two user pointers without validating them, enabling an unprivileged process to read and write kernel memory directly. This flaw could allow overwriting critical kernel data structures such as the sys_call_table, potentially leading to kernel code execution. The fix involves validating both pointers before the critical section and adding fault handling for invalid user addresses.