CVE-2018-5873

—

CVSS 3.1

7.0 high

EPSS

<1%p41

Published

Jul 6, 2018 (Jul 6, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.

Vendors: google linux
Products: android, linux kernel
Weakness: CWE-362, CWE-416
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.