Summaryinfo

A vulnerability marked as critical has been reported in Google Android. This affects the function msm_ipc_router_bind_control_port of the file net/ipc_router/ipc_router_core.c of the component Qualcomm Kernel Module. Performing a manipulation results in race condition (QuadRooter). This vulnerability is known as CVE-2016-2059. Attacking locally is a requirement. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Google Android (Smartphone Operating System) (the affected version is unknown). This affects the function msm_ipc_router_bind_control_port of the file net/ipc_router/ipc_router_core.c of the component Qualcomm Kernel Module. The manipulation with an unknown input leads to a race condition vulnerability (QuadRooter). CWE is classifying the issue as CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows attackers to gain privileges or cause a denial of service (race condition and list corruption) by making many BIND_CONTROL_PORT ioctl calls.

The weakness was published 05/05/2016 (Website). It is possible to read the advisory at codeaurora.org. This vulnerability is uniquely identified as CVE-2016-2059 since 01/25/2016. Attacking locally is a requirement. A authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 90230†). Further details are available at blog.checkpoint.com. Similar entries are available at VDB-83735, VDB-88932, VDB-90517 and VDB-90618. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion