CVE-2016-10225 The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.
HighCVSS 7.8
EPSS 4.0%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Allwinner linux-3.4-sunxi | All versions | No fix listed |
References
- [oss-security] 20161005 Re: CVE request: sunxi-debug (root privilege escalation in Allwinner kernel) mailing-list patch third-party-advisory
- [oss-security] 20170215 Re: CVE request: sunxi-debug (root privilege escalation in Allwinner kernel) mailing-list third-party-advisory
- 93442 third-party-advisory vdb-entry
- forum.armbian.com mailing-list third-party-advisory
- irclog.whitequark.org issue-tracking third-party-advisory
- www.rapid7.com exploit third-party-advisory