Linux Foundation · Zephyr · CVE-2020-10027
**Name of the Vulnerable Software and Affected Versions**
zephyr versions 1.14.0 through 2.1.0 and later versions.
**Description**
An attacker with code execution within a user thread can elevate privileges to that of the kernel.
**Recommendations**
For zephyr versions 1.14.0 through 2.1.0 and later versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.