PT-2018-16081 · Linux+1 · Linux Kernel+1

Published 2018-07-06 · Updated 2018-08-28 · CVE-2018-3597

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) versions prior to security patch level 2018-06-05

Description The issue allows for an arbitrary kernel write to occur in the ADSP RPC driver.

Recommendations For Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-3597

Affected Products

Android

Linux Kernel

References · 3

• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components · Vendor Advisory
• https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=e569b915a246627d0449016408a9c0d388ee4ab4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-3597 · Security Note