PT-2018-2703 · Google+5 · Android Kernel+5
Publicado
2017-10-13
·
Atualizado
2023-02-24
·
CVE-2018-9568
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a possible memory corruption due to type confusion in the
sk clone lock function of sock.c. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation. The vulnerability may also cause a denial of service or allow an attacker to execute arbitrary code.Recommendations
For Android kernel, update to a version that includes the fix for the type confusion issue in
sk clone lock of sock.c.
As a temporary workaround, consider restricting access to the sk clone lock function until a patch is available.Correção
Incorrect Type Conversion or Cast
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Android Kernel
Centos
Red Hat
Suse
Ubuntu