CVE-2018-1000800

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-09-06 · updated 2026-06-17
Weakness: CWE-476

Description

zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).

Affected products

zephyrproject zephyr: 1.12.0

References

https://github.com/zephyrproject-rtos/zephyr/issues/7638
https://github.com/zephyrproject-rtos/zephyr/issues/7638

Get alerted when CVE-2018-1000800 or the next vulnerability affects your stack