Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP_IOC_CREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox.
Product | Vendor | Version |
---|---|---|
n/a | n/a | 2008 for x64-based Systems Service Pack 2 (Core installation) |