PT-2022-28403

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28432

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.176 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description A race condition exists between the release of rpmsg ctrldev and cdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-7610

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.163-lockdep 26 Description The issue is related to a race condition between the release of rpmsg ctrldev and cdev in the Linux kernel. The current code frees the rpmsg ctrldev struct in rpmsg ctrldev release...

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

...

UBUNTU-CVE-2020-0305

In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744...

PT-2020-3580 · Google +4 · Android +4

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to a use-after-free vulnerability in the cdev get function of char dev.c due to a race condition. This could lead to local escalation of privilege with System execution privileges...

DEBIAN-CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...

CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...

CVE-2020-10690: Use After Free

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...

CVE-2020-10690

There is a use-after-free problem seen due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device is removed, it ca...

PT-2020-12286

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.5 Description The issue is caused by a use-after-free due to a race condition between the release of ptp clock and cdev while resource deallocation. This occurs when a high-privileged process allocates a ptp...

PT-2017-3299

Name of the Vulnerable Software and Affected Versions NVIDIA GPU driver versions affected versions not specified Android affected versions not specified Description The issue is related to insufficient access control in the NVIDIA GPU driver, specifically the gm20b clk throt set cdev state...

PT-2013-5052 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12 Description: The issue is related to a buffer overflow in the oz cdev write function, which can be triggered by a crafted write operation. This can cause a denial of service or possibly have other unspecifi...