There is an integer overflow in the ION driver \/dev/ion\ of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd \COMPAT_ION_IOC_SUNXI_FLUSH_RANGE\ to cause a system crash (denial of service).