CVE-2018-10689

CVE-2018-10689 affects blktrace (Block IO Tracing) 1.2.0 used with the Linux kernel/Android. The buffer overflow occurs in dev_map_read (btt/devmap.c) because the device and devno arrays are too small, demonstrated by an invalid free when processing a crafted file. Affected: blktrace 1.2.0 and ol...