PT-2018-6007 · Linux · Linux Kernel

Publicado 2018-06-12 · Atualizado 2018-08-01 · CVE-2017-15842

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: The issue arises from the potential use of a buffer after it has been freed, due to the mutex being unlocked before the buffer is freed. This problem is present in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) that utilize the Linux Kernel.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2017-15842

Produtos afetados

Linux Kernel

Referências · 3

• https://codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2 · Correção
• https://source.android.com/security/bulletin/pixel/2018-05-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15842 · Nota de Segurança