CVE-2018-5873

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.

• CWE-362
• CWE-416

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2018-07-01Vendor Advisory
• https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434bThird Party Advisory
• https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinThird Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2018-07-01Vendor Advisory
• https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434bThird Party Advisory
• https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinThird Party Advisory

Published

Jul 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5867Lack of checking input size can lead to buffer overflow In W…
• CVE-2018-5868Lack of checking input size can lead to buffer overflow In W…
• CVE-2018-5869Improper input validation in the QTEE keymaster app can lead…
• CVE-2018-5870While loading a service image, an untrusted pointer derefere…
• CVE-2018-5871In Snapdragon (Automobile, Mobile, Wear) in version MDM9206,…
• CVE-2018-5872While parsing over-the-air information elements in all Andro…
• CVE-2018-5874While parsing an mp4 file, a stack-based buffer overflow can…
• CVE-2018-5875While parsing an mp4 file, an integer overflow leading to a …
• CVE-2018-5876While parsing an mp4 file, a buffer overflow can occur in Sn…
• CVE-2018-5877In the device programmer target-side code for firehose, a st…
• CVE-2018-5878While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS…
• CVE-2018-5879Improper length check while processing an MQTT message can l…