CVE-2025-9408

Userspace privilege escalation vulnerability on Cortex M PUBLISHED

Description (CNA)

System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / Zephyr	affected * before 3.7.2; affected 4.0.0 before 4.2.2

CWE

CWE-270

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3r6j-5mp3-75wr

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.