Executive brief
The Automotive Grade Linux (AGL) application framework contains a security flaw that allows any local process to issue administrative commands to the system's background services. This component is responsible for managing how applications interact with the vehicle's hardware and software. An attacker with low-level access to the system could exploit this to shut down critical services, execute unauthorized commands, or steal sensitive configuration data, potentially compromising the vehicle's operational integrity.
Technical details
The afb-daemon component in AGL's app-framework-binder fails to implement access control on its abstract Unix supervision socket (@urn:AGL:afs:supervision:socket). The 'on_supervision_call' function in 'src/afb-supervision.c' dispatches eight privileged commands (including Exit, Do, Sclose, and Config) without verifying the credentials or UID of the calling process. Because the abstract socket lacks Discretionary Access Control (DAC) protection, any low-privileged local process can connect to it. An attacker can exploit this to perform a Denial of Service (DoS) by killing the daemon, execute arbitrary API calls, terminate user sessions, or leak global configuration data.
Affected products
- Automotive Grade Linux (AGL) app-framework-binder (afb-daemon) through v19.90.0
Timeline
- 2017-06-29: other: Vulnerability introduced in commit b8c9d5de384efcfa53ebdb3f0053d7b3723777e1
- 2026-04-30: disclosed: Reported by Innora Security Research
- 2026-05-01: advisory: CVE published