Description
The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 6 Oct 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.