CVE-2014-9645

Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.23.0

Description The issue is related to the add probe function in modutils/modprobe.c and is caused by insufficient input validation, allowing local users to bypass restrictions on loading kernel modules by using a / character in a module name. This can be demonstrated through commands such as "ifconfig /usbserial up" or "mount -t /snd pcm none /". The vulnerability affects the integrity of data.

Recommendations For versions prior to 1.23.0, update to version 1.23.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the add probe function until a patch is available. Avoid using the / character in module names to minimize the risk of exploitation.