CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: the msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the ipc router kernel module for the linux kernel 3.x, as used in qualcomm innovation center (quic) android contributions for msm devices and other products, does not verify that a port is a client port, which allows attackers to gain privileges or cause a denial of service (race condition and list corruption) by making many bind_control_port ioctl calls.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-05-05
Last Modified Date: 2016-12-01