{"id":"UBUNTU-CVE-2018-3574","details":"In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the ION_FLAG_SECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which does not belong to HLOS.","modified":"2025-07-16T08:14:02.308518Z","published":"2018-09-19T14:29:00Z","withdrawn":"2025-07-18T16:44:25Z","upstream":["CVE-2018-3574"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-3574"},{"type":"REPORT","url":"https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=3286b75d91519073d2f20bee85f22e294d5f1a18"},{"type":"REPORT","url":"https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=09874396dfbf546e5a628d810fcf5ea51a4d5785"},{"type":"REPORT","url":"https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=53261410da625aaa2e070555aaa150a8533e5be4"},{"type":"REPORT","url":"https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000049462"},{"type":"REPORT","url":"https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2018-3574"}],"affected":[{"package":{"name":"linux-azure","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/linux-azure@4.15.0-1023.24~14.04.1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1023.24~14.04.1"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-azure-cloud-tools-4.15.0-1023","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-azure-cloud-tools-4.15.0-1023-dbgsym","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-azure-headers-4.15.0-1023","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-azure-tools-4.15.0-1023","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-azure-tools-4.15.0-1023-dbgsym","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-cloud-tools-4.15.0-1023-azure","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-headers-4.15.0-1023-azure","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-image-unsigned-4.15.0-1023-azure","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-image-unsigned-4.15.0-1023-azure-dbgsym","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-modules-4.15.0-1023-azure","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-modules-extra-4.15.0-1023-azure","binary_version":"4.15.0-1023.24~14.04.1"},{"binary_name":"linux-tools-4.15.0-1023-azure","binary_version":"4.15.0-1023.24~14.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-3574.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"low"}]}