Wind River Support Network


LIN6-12536 : Security Advisory - busybox - CVE-2014-9645

Created: Mar 13, 2017    Updated: Dec 3, 2018
Resolved Date: Apr 17, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an ifconfig /usbserial up command or a mount -t /snd_pcm none / command.

Other Downloads

Live chat