OpenHarmony up to 3.0.6/3.1.2 Device Driver /dev/mmz_userdev default permission

Summaryinfo

A vulnerability has been found in OpenHarmony up to 3.0.6/3.1.2 and classified as critical. The affected element is an unknown function of the file /dev/mmz_userdev of the component Device Driver. Performing a manipulation results in default permission. This vulnerability was named CVE-2022-42464. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability classified as critical has been found in OpenHarmony up to 3.0.6/3.1.2. This affects an unknown part of the file /dev/mmz_userdev of the component Device Driver. The manipulation with an unknown input leads to a default permission vulnerability. CWE is classifying the issue as CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in further attacks. The processes with system user UID run on the device would be able to mmap memory pools used by kernel and override them which could be used to gain kernel code execution on the device, gain root privileges, or cause device reboot.

The weakness was presented 10/14/2022. It is possible to read the advisory at gitee.com. This vulnerability is uniquely identified as CVE-2022-42464 since 10/08/2022. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1222 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Smartphone Operating System

Name

• OpenHarmony

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.1.0
• 3.1.1
• 3.1.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion