PT-2018-17178 · Linux · Linux Kernel

Published 2018-06-06 · Updated 2019-10-03 · CVE-2018-5840

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: A buffer copy issue without checking the size of the input can occur during the DRM SDE driver initialization sequence. This issue affects all Android releases from CAF, including Android for MSM, Firefox OS for MSM, and QRD Android.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-5840

Affected Products

Linux Kernel

References · 3

• https://codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2 · Patch
• https://source.android.com/security/bulletin/2018-05-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5840 · Security Note