CVE-2018-5873: vulnerability in Qualcomm, Inc. Android for MSM, Firefox OS for…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD AndroidRelated CVEs — Qualcomm, Inc. Android for MSM, Firefox OS for…
In the same product, most dangerous first.
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34https://source.android.com/security/bulletin/2018-07-01https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434bhttps://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin