CoreCVE
Back

HIGH

ToaruOS 1.99.2 is affected by incorrect access control via the kernel

Published Jun 8, 2022

Description

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-668

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 8, 2022
Updated Aug 4, 2024
Reserved Jul 12, 2021
Link CVE-2021-36710
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2021-36710
Red Hat
Severity n/a
Public date n/a
Links CVE-2021-36710
ENISA EUVD
Assigner mitre
Published Jun 8, 2022
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2021-23305
EUVD-2021-23305