The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Msm8960 | Qualcomm | - (including) | - (including) |
| Android | Motorola | 4.1.2 (including) | 4.1.2 (including) |
References
- http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
- http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/
- http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
- http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/