CVE-2025-59104

With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attacker is able to gain a root shell through this vulnerability.

With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attacker is able to gain a root shell through this vulnerability.

Con acceso físico al dispositivo y tiempo suficiente, un atacante es capaz de soldar puntas de prueba a la huella de depuración (o usar el cable tag-connect de 6 pines). Así, el atacante obtiene acceso al bootloader, donde la línea de comandos del kernel puede ser cambiada. Un atacante es capaz de obtener una shell de root a través de esta vulnerabilidad.