CVE-2025-9408

High

System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for…

zephyr·CWE-270·Published 2025-11-11

CVSS

8.2

EPSS

0.00

KEV

Exploits

cve.orgen

164 chars

System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.

NVDen

164 chars

System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.

La entrada de llamada al sistema en Cortex M (y posiblemente R y A, pero creo que no) tiene una condición de carrera que permite una escalada de privilegios muy práctica para procesos maliciosos del espacio de usuario.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.2	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	8.2	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
3.1	Secondary	NVD	8.1	1.4	6.0	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H