PT-2022-30297

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-29376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed i...

PT-2022-30686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-11011

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds write due to improper input validation in the amcs cdev unlocked ioctl function of audiometrics.c. This could lead to local...

PT-2022-28894

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.11 and is fix...

GSD-2022-1000154 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev

rpmsg: char: Fix race between the release of rpmsgctrldev and cdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.176 by commit...

PT-2022-28432

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.176 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28403

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-7610

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.163-lockdep 26 Description The issue is related to a race condition between the release of rpmsg ctrldev and cdev in the Linux kernel. The current code frees the rpmsg ctrldev struct in rpmsg ctrldev release...

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

...

UBUNTU-CVE-2020-0305

In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744...

PT-2020-3580 · Google +4 · Android +4

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to a use-after-free vulnerability in the cdev get function of char dev.c due to a race condition. This could lead to local escalation of privilege with System execution privileges...

DEBIAN-CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...

CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...