Eclipse ThreadX Improper Parameter Check Vulnerability in Syscall Implementation Allowing Arbitrary Memory Read/Write

A vulnerability exists in Eclipse ThreadX versions prior to 6.4.3, when memory protection is enabled. The issue stems from inadequate verification of syscall parameters, which allows an attacker to bypass user-kernel isolation. This flaw can lead to privilege escalation and unauthorized read or write access to arbitrary memory. The vulnerability arises from the incorrect implementation of parameter checking macros, which fail to properly validate kernel object pointers, creating an opportunity for exploitation.

Impact

Exploitation of this vulnerability can result in privilege escalation and arbitrary memory read or write access.

Remediation

Users can upgrade to Eclipse ThreadX version 6.4.3 or later to address this vulnerability.