Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Local Privilege Escalation (LPE) in FolkPatch due to Hardcoded Default SuperKey

oss-security ()6 · 3 reads
Read at seclists.org
AI summary · glm-5.3-flashSummaries by Vani AI

A hardcoded default SuperKey in FolkPatch, an APatch-based kernel patching tool, enables local privilege escalation limited to FolkPatch's downstream code.

A disclosure posted to the oss-security mailing list describes a local privilege escalation (LPE) in FolkPatch caused by a hardcoded default SuperKey. FolkPatch is a downstream project based on APatch that utilizes its own custom KernelPatch. According to the post, the vulnerability is specific to FolkPatch's downstream modifications rather than upstream APatch or KernelPatch code.

Key facts
  • Hardcoded default SuperKey enables local privilege escalation
  • FolkPatch is a downstream modification of APatch with a custom KernelPatch
  • Flaw does not affect upstream APatch/KernelPatch code
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
androidapatchfolkpatchhardcoded-credentialskernelpatchprivilege-escalation
Vendors
FolkPatchAPatchKernelPatch
Products
FolkPatchAPatchKernelPatch

From the original article

Posted by 12345678 on Sep 12 Dear oss-security mailing list subscribers, https://github. com/LyraVoid/FolkPatch), https://github. com/bmax121/APatch) that utilizes its own custom https://github.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.