Linux kernel elevation of privilege vulnerability (CNVD-2019-42726)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An elevation of privilege vulnerability exists in drivers/media/platform/vivid in Linux kernel 5.3.8 and earlier. The...

CVE-2019-18683: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during...