Linux kernel elevation of privilege vulnerability (CNVD-2019-42726)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An elevation of privilege vulnerability exists in drivers/media/platform/vivid in Linux kernel 5.3.8 and earlier. The...

CVE-2019-18683: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during...

PT-2019-4438

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.8 Description The issue is related to a race condition in the V4L2 subsystem of the Linux kernel, specifically in the drivers/media/platform/vivid module. This is caused by incorrect mutex locking in function...

PT-2015-7654

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3 Description The issue allows local users to obtain sensitive information from kernel memory via a crafted application, due to the vivid fb ioctl function in drivers/media/platform/vivid/vivid-osd.c not...