Attributed metadata history
Up to 100 retained publisher events per page for f2abb326dd012f4aa7c21f66a72ab10d08c032a8789ed02ad1c9cabd475cba2a. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
available
Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to disclose sensitive information from the kernel. Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlog_exception and /dev/hwlog_jank) that facilitate better system diagnostics through a series of ioctl calls. One of these diagnostics module is referred to as zrhung, and it provides information and configuration options to monitor hung processes. The implementation of the config set ioctl contains a race condition vulnerability that allows an attacker to free the underlying buffer that holds the configuration data. Consecutive config get ioctl calls use the dangling pointers to read and disclose, potentially sensitive, dynamically allocated kernel data.
Fingerprint: 3449a872a09396dff19bda0d8140e11d1fa066b8e530b3a2a73d56af6cd354e6