PT-2018-6007 · Linux · Linux Kernel

Published 2018-06-12 · Updated 2018-08-01 · CVE-2017-15842

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: The issue arises from the potential use of a buffer after it has been freed, due to the mutex being unlocked before the buffer is freed. This problem is present in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) that utilize the Linux Kernel.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2017-15842

Affected Products

Linux Kernel

References · 3

• https://codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-15842 · Security Note
• https://source.android.com/security/bulletin/pixel/2018-05-01 · Note