Huawei P8 GPU driver DoS Vulnerability (with test code)

Huawei P8 GPU driver DoS Vulnerability (with test code)

Multiple Huawei P8 mobile phones use arm mali gpu. This chip driver has a Denial-of-Service vulnerability. Attackers with any permission can exploit this vulnerability to crash the mobile phone kernel.

Detailed description:

Vulnerability Verification Device: Huawei P8 youth edition (using Mali sans MP4 GPU)

This bug is essentially a mali driver Vulnerability, so I also posted a post on the Mali driver developer forum.

Http://community.arm.com/message/31052#31052

This post details the cause of this vulnerability

Proof of vulnerability:

Any user can call/dev/mali device files of P8 youth edition and read and write them. Here, the shell user executes the test program to cause crash.

Theoretically, any Huawei mobile phone that uses mali4_32 or mali4_64 drivers has this vulnerability.

Solution:

MALI_STATIC_INLINE mali_bool _ mali_osk_list_empty (_ mali_osk_list_t * list) {return list-> next = list ;}

Change

MALI_STATIC_INLINE mali_bool _ mali_osk_list_empty (_ mali_osk_list_t * list) {return! (List-> next) | (list-> next = list );}