Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition in the binder:binderaddfreezework function due to a lock ordering issue, which could...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a frozen work release in the binderreleasework function in the binder subsystem...

CVE-2024-56553: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: binder: fix memleak of proc-deliveredfreeze If a freeze notification is cleared with BCCLEARFREEZENOTIFICATION before calling binderfreezenotificationdone, then it is detached from its reference e.g. ref-freeze but the work remai...

CVE-2024-56555: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binderaddfreezework In binderaddfreezework we iterate over the proc-nodes with the proc-innerlock held. However, this lock is temporarily dropped to acquire the node-lock first lock nesting order. This can race...

CVE-2024-56556: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binderaddfreezework In binderaddfreezework we iterate over the proc-nodes with the proc-innerlock held. However, this lock is temporarily dropped in order to acquire the node-lock first lock nesting order...

CVE-2024-56554: Use After Free

In the Linux kernel, the following vulnerability has been resolved: binder: fix freeze UAF in binderreleasework When a binder reference is cleaned up, any freeze work queued in the associated process should also be removed. Otherwise, the reference is freed while its ref-freeze.work is still queu...

CVE-2018-11816

Crafted Binder Request Causes Heap UAF in MediaServer...

CVE-2018-11816 Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer...

CVE-2018-11816 Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer...

PT-2024-10610 · Unknown · Mediaserver

Name of the Vulnerable Software and Affected Versions: MediaServer affected versions not specified Description: A crafted Binder request can cause a heap use-after-free UAF issue in MediaServer. This issue may lead to unspecified consequences, but specific details about the impact or potential...

CVE-2018-11816: Use After Free

Crafted Binder Request Causes Heap UAF in MediaServer...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-10684

Name of the Vulnerable Software and Affected Versions Parcel.cpp affected versions not specified Description The issue is related to a possible information leak across processes using Binder, due to uninitialized data in the writeInplace function of Parcel.cpp. This could lead to local informatio...

CVE-2018-9421: Use of Uninitialized Resource

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the binder component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the binder component in the Linux operating system’s kernel is related to errors at the bindergetobject function. Exploiting this vulnerability allows an attacker to execute arbitrary code...

kernel: aio: fix use-after-free due to missing POLLFREE handling

In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfdpoll and binderpoll are special in that they use a waitqueue whose lifetime is the current task, rather than the struct file as is normally the case. This is okay f...