PT-2018-10845 · Linux · Linux Kernel

Publicado 2018-09-18 · Atualizado 2019-04-05 · CVE-2018-11840

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue exists in the WLAN driver command ioctl processing, where a temporary buffer used to construct the reply message may be freed twice. This is present in all Android releases from CAF using the Linux kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2018-11840

Produtos afetados

Linux Kernel

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-11840 · Nota de Segurança
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a3d53bb977b907a5d11d22cad3f8ebf3f1d2b1ed · Correção
• http://securityfocus.com/bid/107770 · Nota
• https://codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin · Correção