HIGH
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl
Published Sep 18, 2018
7.0
HIGHCVSS 3.0
EPSS 0.14%
Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition.
Affected products
-
- Version All Android releases from CAF using the Linux kernelStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Qualcomm, Inc. | Android for MSM, Firefox OS for MSM, QRD Android | n/a |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3810 Advisory
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=7d1e40be0f7da526f1109005383aa55f5646fc13 x_refsource_CONFIRMPatchThird Party Advisory
- https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=999bfde119d881a09218eb045d41fb83e67f0d10 x_refsource_CONFIRMPatchThird Party Advisory
- https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin x_refsource_CONFIRMPatchThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3810 | Advisory | |
| https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=7d1e40be0f7da526f1109005383aa55f5646fc13 | x_refsource_CONFIRMPatchThird Party Advisory | |
| https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=999bfde119d881a09218eb045d41fb83e67f0d10 | x_refsource_CONFIRMPatchThird Party Advisory | |
| https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin | x_refsource_CONFIRMPatchThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner qualcomm
Published Sep 18, 2018
Updated Aug 5, 2024
Reserved Jun 7, 2018
Link CVE-2018-11818
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2018-3810 Assigner qualcomm
Published Sep 18, 2018
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2018-3810