Sentry Kernel IRQ Line Manipulation Vulnerability Leading to Denial-of-Service and Covert Channels

A vulnerability exists in the Sentry kernel, a micro-kernel designed for high-security embedded systems, prior to version 0.4.7. Tasks with DEV or IO capabilities can improperly interact with another task's IRQ line using the __sys_int_* syscall family. This flaw can cause denial-of-service conditions and create covert channels between the affected task and the external environment.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition and establish covert channels between tasks, allowing for unauthorized communication with the outside world.

Remediation

Users can upgrade to Sentry kernel version 0.4.7 or later to address this vulnerability. For those on versions prior to 0.4.7, it is recommended to limit tasks with DEV and IO capabilities to just one.