CVE-2013-6122 - goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly synchronize updates to a global variable, which allows local users to bypass intended access restrictions or cause a denial of service (memory corruption) via crafted arguments to the procfs write handler

Back Back to CVE browser

MEDIUM

goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly synchronize updates to a global variable, which allows local users to bypass intended access restrictions or cause a denial of service (memory corruption) via crafted arguments to the procfs write handler

Published Nov 12, 2013

6.9

MEDIUM

CVSS 2.0

EPSS 0.30%

Description

goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly synchronize updates to a global variable, which allows local users to bypass intended access restrictions or cause a denial of service (memory corruption) via crafted arguments to the procfs write handler.

Affected products

Remediation

Red Hat statement

Not vulnerable. This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

Weaknesses (1)

CWE-20

Improper Input Validation

References (7)

http://www.openwall.com/lists/oss-security/2013/11/08/1
mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2013-6122
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5951
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-6122
https://www.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=f53bcf29a6e7a66b3d935b8d562fa00829261f05
x_refsource_CONFIRMExploitPatch
https://www.codeaurora.org/projects/security-advisories/multiple-memory-corruption-issues-and-race-condition-goodix-gt915-touchscreen-driver-procfs-handler
x_refsource_CONFIRMPatch
https://www.cve.org/CVERecord?id=CVE-2013-6122

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2013/11/08/1		mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2013-6122		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5951		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-6122
https://www.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=f53bcf29a6e7a66b3d935b8d562fa00829261f05		x_refsource_CONFIRMExploitPatch
https://www.codeaurora.org/projects/security-advisories/multiple-memory-corruption-issues-and-race-condition-goodix-gt915-touchscreen-driver-procfs-handler		x_refsource_CONFIRMPatch
https://www.cve.org/CVERecord?id=CVE-2013-6122