The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
References
Link | Resource |
---|---|
https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1000 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-02-25T04:00:00
Updated: 2019-02-25T04:57:01
Reserved: 2019-02-24T00:00:00
Link: CVE-2019-9112
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-02-25T04:29:00.417
Modified: 2019-02-26T16:28:42.610
Link: CVE-2019-9112
JSON object: View
Redhat Information
No data.
CWE