CVE-2018-5873
Summary
| CVE | CVE-2018-5873 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-06 19:29:00 UTC |
| Updated | 2023-07-19 00:53:00 UTC |
| Description | An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05. |
Risk And Classification
Problem Types: CWE-362 | CWE-416
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Android | - | All | All | All | |
| Operating System | Android | - | All | All | All | |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Android Security Bulletin—July 2018 | Android Open Source Project | CONFIRM | source.android.com | Vendor Advisory |
| kernel/msm-4.9 - Unnamed repository | CONFIRM | source.codeaurora.org | Third Party Advisory |
| kernel/git/torvalds/linux.git - Linux kernel source tree | CONFIRM | git.kernel.org | Patch, Third Party Advisory |
| July 2018 Code Aurora Security Bulletin - Code Aurora | CONFIRM | www.codeaurora.org | Third Party Advisory |
| nsfs: mark dentry with DCACHE_RCUACCESS · torvalds/linux@073c516 · GitHub | CONFIRM | github.com | Patch, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.