Cisco Talos finds 10 vulnerabilities in Azure Sphere’s Linux kernel, Security Monitor and Pluton
Summary: Cisco Talos disclosed 10 vulnerabilities in Microsoft's Azure Sphere IoT platform: two in the Linux kernel, seven in Security Monitor, and one in the Pluton security subsystem. The Linux flaws (CVE-2021-41374 and CVE-2021-41375) leak kernel memory through GPIO ioctls, while the Security Monitor issues include an unchecked ABIDepends size field that causes a persistent boot loop and a signature check bypass (CVE-2021-42300) that allows flashing any Microsoft-signed binary.
What's compelling: The signature check bypass lets an attacker downgrade arbitrary firmware or the whole device to a previous version and target older issues in the code, and Microsoft declined to fix the Pluton concurrent syscall flaw or assign a CVE, calling it intended behavior.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-41374CVE-2021-41375
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026