ZeroHour

Search: “APatch”

2 stories

Local Privilege Escalation (LPE) in FolkPatch due to Hardcoded Default SuperKey

A hardcoded default SuperKey in FolkPatch, an APatch-based kernel patching tool, enables local privilege escalation limited to FolkPatch's downstream code.

A disclosure posted to the oss-security mailing list describes a local privilege escalation (LPE) in FolkPatch caused by a hardcoded default SuperKey. FolkPatch is a downstream project based on APatch that utilizes its own custom KernelPatch. According to the post, the vulnerability is specific to FolkPatch's downstream modifications rather than upstream APatch or KernelPatch code.

oss-security · 4d agoVulnerability1