High · published October 22, 2025
⚡ A local user can slip right past security with this sneaky memory access – it’s like finding a secret door in a library that leads to all the hidden books! 📚 Think of the ltq-ptm driver as a delivery system for packages in a shared warehouse. If someone can tamper with the package labels, they can open any box and mess with the contents inside, all without being caught! An attacker with local access could read and write arbitrary kernel memory, which is absolutely devastating. This could lead to malicious actions like escaping sandboxed environments, potentially compromising the entire system! 🛑
Think of the ltq-ptm driver as a delivery system for packages in a shared warehouse. If someone can tamper with the package labels, they can open any box and mess with the contents inside, all without being caught! Prior to OpenWrt version 24.10.4, the ltq-ptm driver allowed local users to manipulate kernel memory via IOCTL calls, affecting the Lantiq/Intel/MaxLinear architecture but not the VRX518 DSL driver.
An attacker with local access could read and write arbitrary kernel memory, which is absolutely devastating. This could lead to malicious actions like escaping sandboxed environments, potentially compromising the entire system! 🛑 Update your OpenWrt to version 24.10.4 to close this vulnerability immediately. Unfortunately, there are no workarounds available, so make this a top priority! 🔥 You've got this! Apply the update, and secure your system in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| openwrt/openwrt | < 24.10.4 | 24.10.4 |