EUVD-2018-2959

Malware in sbrugna...

Privilege Escalation

Linux kernel is vulnerable to privilege escalation vulnerability. The vulnerability exists in the function sndrawmidiinputparams of the file rawmidi.c of the component MIDI Kernel Driver. An attacker could manipulate this with an unknown input which lead to a privilege escalation impacting...

CVE-2018-10902: Use After Free

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...