CVE-2017-9711

Certain unprivileged processes are able to perform IOCTL calls.

CVE-2018-5852

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

CVE-2018-11952

An image with a version lower than the fuse version may potentially be booted lead to improper authentication.