CVE-2018-18281

CVE-2018-18281 is a Linux kernel local vulnerability due to a race in mremap() where TLB flushes can occur too late, potentially allowing a process to access memory after it has been freed. The issue stems from moving page tables during mremap(), where stale TLB entries may remain until after the...

CVE-2017-18281

creationtimestamp| type| source ---|---|--- 2018-10-29 21:28:15+00:00| seen| https://t.me/cibsecurity/915...

CVE-2017-18281

A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel...

CVE-2017-18281

CVE-2017-18281 describes a vulnerability in the Android Video component used by CAF (Linux kernel-based) where a boolean variable is typecast to int before reading, causing an out-of-bounds read. Affected is Android releases that rely on CAF with the Linux kernel. According to NVD, the CVSS metri...

Linux mremap() TLB Flush Too Late

Linux: mremap TLB flush too late with concurrent ftruncate CVE-2018-18281 Tested on the master branch 4.19.0-rc7+. sysmremap takes current-mm-mmapsem for writing, then calls mremapto-movevma-movepagetables. movepagetables first calls moveptes which takes PTE locks, moves PTEs, and drops PTE locks...