CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2017-8925
https://notcve.org/view.php?id=CVE-2017-8925
The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling. La función omninet_open en drivers/usb/serial/omninet.c en kernel de Linux anterior a 4.10.4 permite a los usuarios locales causar una denegación de servicio (agotamiento de tty) aprovechando el manejo incorrecto del contador de referencia. • http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30572418b445d85fcfe6c8fe84c947d2606767d8 http://www.debian.org/security/2017/dsa-3886 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4 http://www.securityfocus.com/bid/98462 https://github.com/torvalds/linux/commit/30572418b445d85fcfe6c8fe84c947d2606767d8 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 4.6EPSS: 0%CPEs: 3EXPL: 0CVE-2017-8924
https://notcve.org/view.php?id=CVE-2017-8924
The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow. La función edge_bulk_in_callback en drivers/usb/serial/io_ti.c en el kernel de Linux anterior a 4.10.4 permite a los usuarios locales obtener información sensible (en el dmesg ringbuffer y syslog) de la memoria del kernel no inicializada usando un dispositivo USB manipulado (aparentando ser un io_ti USB serie) para activar un desbordamiento inferior de enteros. • http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=654b404f2a222f918af9b0cd18ad469d0c941a8e http://www.debian.org/security/2017/dsa-3886 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4 http://www.securityfocus.com/bid/98451 https://github.com/torvalds/linux/commit/654b404f2a222f918af9b0cd18ad469d0c941a8e • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 7.6EPSS: 0%CPEs: 2EXPL: 0CVE-2016-10283
https://notcve.org/view.php?id=CVE-2016-10283
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32094986. • http://www.securityfocus.com/bid/98160 https://source.android.com/security/bulletin/2017-05-01 https://www.codeaurora.org/stack-overflow-wifi-driver-function-wlanhddchangestation-cve-2016-10283 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.7EPSS: 0%CPEs: 2EXPL: 0CVE-2017-0631
https://notcve.org/view.php?id=CVE-2017-0631
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35399756. • http://www.securityfocus.com/bid/98216 https://source.android.com/security/bulletin/2017-05-01 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 1CVE-2016-10277 – Motorola Bootloader - Kernel Cmdline Injection Secure Boot and Device Locking Bypass
https://notcve.org/view.php?id=CVE-2016-10277
An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490. • https://www.exploit-db.com/exploits/42601 http://www.securityfocus.com/bid/98149 https://source.android.com/security/bulletin/2017-05-01 • CWE-264: Permissions, Privileges, and Access Controls •