CVE-2020-10058: 
NixOS vulnerability analysis and mitigation

Multiple syscalls in the Kscan subsystem of Zephyr RTOS perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. The vulnerability was discovered in 2020 and assigned identifier CVE-2020-10058. The issue affects the Kscan driver interface in Zephyr RTOS (NVD).

The vulnerability is classified as CWE-20 (Improper Input Validation). The issue stems from missing validation checks of driver objects in two APIs within the Kscan subsystem. This security flaw could allow userspace code to bypass security checks performed by system call handlers (Zephyr PR).

The vulnerability could allow code executing in userspace to potentially gain elevated privileges, which could lead to unauthorized access to kernel functionality. This represents a significant security risk as it breaks the userspace-kernel separation model.

The vulnerability requires local access and the ability to execute code in userspace. An attacker would need to specifically craft calls to the affected Kscan subsystem APIs to exploit the vulnerability.

The issue was fixed in Zephyr version 2.2.0 through proper validation checks of driver objects in the syscall handlers. The fix was also backported to version 2.1.x branch (Zephyr PR).