EUVD-2018-4589

Malware in sbrugna...

CVE-2018-12633: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with copyfromuser. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables...