PT-2018-19003 · Google+1 · Android Kernel+1

Published 2018-07-03 · Updated 2018-12-12 · CVE-2018-9415

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a possible double free due to improper locking in the driver override store and driver override show functions of bus.c. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android kernel, apply the fix provided in the upstream kernel to resolve the issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2018-9415

USN-3752-1

USN-3752-2

USN-3752-3

Affected Products

Android Kernel

Ubuntu

References · 37

• https://ubuntu.com/security/CVE-2018-10323 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3752-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-11412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1120 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-9415 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3752-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3752-3 · Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2018-07-01 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13094 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-9415 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12233 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3752-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1108 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-9415 · Security Note