PT-2018-17191 · Linux · Linux Kernel

Published 2018-11-27 · Updated 2018-12-21 · CVE-2018-5856

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A race condition in the Audio component of the Linux kernel can lead to a Use After Free condition. This issue affects Android releases, including Android for MSM, Firefox OS for MSM, and QRD Android, from CAF using the Linux kernel.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2018-5856

Affected Products

Linux Kernel

References · 4

• https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=3b666735fcc49f5cd3a63440fdc0667ae9316f17 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-5856 · Security Note
• https://codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin · Patch
• https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=7ab92dd2952d59f3c15c856effe94bba1858e3ff · Patch