A critical memory safety vulnerability in the Zephyr RTOS flash_copy system call could allow a local attacker to achieve elevated privileges or compromise system integrity.

The vulnerability exists within the implementation of the flash_copy system call, specifically in the verification logic handled by z_vrfy_flash_copy. This flaw allows a local, authenticated user to bypass intended memory protections.

With a CVSS score of 8.8, this vulnerability poses a severe risk to embedded systems running the Zephyr RTOS. Unauthorized access to flash memory can result in complete system compromise, firmware tampering, or the exposure of sensitive data stored on the device.

Immediate Action: Update the Zephyr RTOS to version 4.4.2 or later to include the necessary security fixes for the flash_copy system call.

Proactive Monitoring: Implement strict access control lists for local system users and monitor for unauthorized attempts to access low-level system calls or memory-mapped flash regions.

Compensating Controls: If an update cannot be applied immediately, restrict access to the device to only trusted local users and disable unnecessary system calls if the hardware configuration permits.

Public Exploit Available: Unknown

Given the critical nature of memory safety flaws in an RTOS, immediate patching is essential to prevent potential full-system compromise. Development teams should prioritize upgrading the Zephyr kernel version to 4.4.2 to ensure the integrity of the flash subsystem.