CVE-2020-10067: Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-11 · updated 2026-06-17
Weakness: CWE-190

Description

A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the kernel. See NCC-ZEP-005 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

Affected products

zephyrproject zephyr: 1.14.1, 2.1.0

References

https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10067
https://github.com/zephyrproject-rtos/zephyr/pull/23239
https://github.com/zephyrproject-rtos/zephyr/pull/23653
https://github.com/zephyrproject-rtos/zephyr/pull/23654
https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-27
https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10067
https://github.com/zephyrproject-rtos/zephyr/pull/23239
https://github.com/zephyrproject-rtos/zephyr/pull/23653
https://github.com/zephyrproject-rtos/zephyr/pull/23654
https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-27

Get alerted when CVE-2020-10067 or the next vulnerability affects your stack