CVE-2016-10225: High severity allwinner linux vulnerability
Published Mar 27, 2017
·Updated
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxidebug/sunxidebug.
Affected Software
4 affected components
Allwinner Linux-3.4-sunxi
Allwinner A83T
Allwinner H3
Allwinner H8
Remediation
Patch Available
Event History
Mar 27, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10225?
CVE-2016-10225 has a high severity level as it allows local users to gain root privileges.
2
How do I fix CVE-2016-10225?
To fix CVE-2016-10225, update the Allwinner Linux-3.4-sunxi kernel to the latest patched version.
3
Who is affected by CVE-2016-10225?
CVE-2016-10225 affects users running the Allwinner 3.4 legacy kernel on H3, A83T, and H8 devices.
4
Can CVE-2016-10225 be exploited remotely?
No, CVE-2016-10225 can only be exploited locally by users with access to the system.
5
What devices are impacted by CVE-2016-10225?
The devices impacted by CVE-2016-10225 include Allwinner H3, A83T, and H8 that use the affected kernel.