PT-2018-10250

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash. This is due to a flaw in the...

PT-2018-10249

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3,...

PT-2018-10248

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

PT-2018-10245

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device file "/dev/rpmsg-omx1" with the command 3221772291, and cause a kernel crash. This is due to a flaw in the kerne...

PT-2018-10247

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

PT-2018-10243

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

PT-2018-10246

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

Null pointer dereference

The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted 0xc0d8b300 ioctl call...

CVE-2018-18318

The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted 0xc0d8b300 ioctl call...

CVE-2018-18318: NULL Pointer Dereference

The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted 0xc0d8b300 ioctl call...

PT-2018-14402

Name of the Vulnerable Software and Affected Versions Qiku 360 Phone N6 Pro 1801-A01 affected versions not specified Description The issue allows attackers to cause a denial of service, resulting in a NULL pointer dereference and device crash, via a crafted 0xc0d8b300 ioctl call to the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4245)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4245 advisory. - rds: CVE-2018-7492: Fix NULL pointer dereference in rdsrdmamap Hakon Bugge Orabug: 28552792 CVE-2018-7492 - cdrom: Fix info leak/OOB read in...

Debian DSA-4313-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2018-15471 XSA-270 Felix Wilhelm of Google Project Zero discovered a flaw in the hash handling of the xen-netback Linux kernel module. A maliciou...

Design/Logic Flaw

arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control with full register control. An attacker ca...

CVE-2018-18021

arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control with full register control. An attacker ca...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2018-18021: Improper Input Validation

arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control with full register control. An attacker ca...

PT-2018-3631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the cdrom ioctl select disc function in the Linux kernel, specifically in the drivers/cdrom/cdrom.c file. It is associated with information disclosure. Exploitati...

CVE-2018-16713

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

Code injection

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory...