CVE-2018-11906
HighIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a security concern with default privileged access to ADB and debug-fs.
CVSS 3.0 score
7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness type
CWE-276CVE-2018-11906 is classified as CWE-276
See CWE-276 on MITRE CWE for full details on this weakness type.
References
The following references provide additional information about CVE-2018-11906 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://source.codeaurora.org/quic/le/meta-qti-bsp/commit/?id=1dffcbf6fea3667a9a19dad70ddba12eff5ccbfb
-
PatchKernel patch commithttps://source.codeaurora.org/quic/le/qti-conf/commit/?id=0eeb4558d541fac40b486a224eb6c601b64115a1
-
PatchKernel patch commithttps://source.codeaurora.org/quic/le/qti-conf/commit/?id=fba5fe2ff19998db42acd4c39a6b02246e13bee0
Frequently asked questions
-
What is CVE-2018-11906?
CVE-2018-11906 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . CVE-2018-11906 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2018-11906?
CVE-2018-11906 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.0). The vector string is
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. -
Is there a patch available for CVE-2018-11906?
No patch is currently available for CVE-2018-11906. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2018-11906 actively exploited?
No — CVE-2018-11906 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.