PT-2018-19003 · Google+1 · Android Kernel+1

Publicado 2018-07-03 · Atualizado 2018-12-12 · CVE-2018-9415

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a possible double free due to improper locking in the driver override store and driver override show functions of bus.c. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android kernel, apply the fix provided in the upstream kernel to resolve the issue.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2018-9415

USN-3752-1

USN-3752-2

USN-3752-3

Produtos afetados

Android Kernel

Ubuntu

Referências · 37

• https://github.com/AOSiP-Devices/kernel_google_wahoo/commit/590ad46f40533ae119b5047cfc20ba461034dcce · Nota
• https://ubuntu.com/security/CVE-2018-10323 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3752-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-11412 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1120 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-9415 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3752-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3752-3 · Aviso do Fabricante
• https://source.android.com/security/bulletin/pixel/2018-07-01 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-13094 · Aviso do Fabricante
• https://patchwork.kernel.org/patch/10175615 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-9415 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1093 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-12233 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3752-1 · Aviso do Fabricante