Nissan Leaf ZE1 Kernel Module Signature Verification Vulnerability Allowing Code Execution in Kernel Context

A vulnerability exists in the Nissan Leaf ZE1 infotainment system manufactured in 2020, due to the lack of kernel module signature verification. This flaw allows an attacker with root access, potentially exploiting other vulnerabilities, to load custom kernel modules and execute code in the kernel context. Such an action could lead to complete control over the system.

Impact

Exploitation of this vulnerability could result in unauthorized code execution within the kernel, allowing an attacker to gain full control over the vehicle's systems.