CVE-2018-1000800

Name of the Vulnerable Software and Affected Versions zephyr-rtos version 1.12.0

Description The issue is related to a NULL base pointer reference in the sys ring buf put() and sys ring buf get() functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a malicious application calling the vulnerable kernel APIs, specifically sys ring buf get() and sys ring buf put().

Recommendations For zephyr-rtos version 1.12.0, consider restricting access to the sys ring buf get() and sys ring buf put() functions until a patch is available. As a temporary workaround, avoid using these functions in applications to minimize the risk of exploitation.