CVE-2018-11818

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.1%

probabilidade de exploração

0.1%top 97% das CVEs

exploração observada

nãonenhuma fonte reporta

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition.

Produtos afetados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referências

https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=7d1e40be0f7da526f1109005383aa55f5646fc13 https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=999bfde119d881a09218eb045d41fb83e67f0d10 https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin