CVE-2018-9415: Double Free
In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-9415.
What is the severity of CVE-2018-9415?
The severity of CVE-2018-9415 is high.
How does CVE-2018-9415 impact Android?
CVE-2018-9415 could lead to local escalation of privilege with System execution privileges needed on Android.
Is user interaction required for exploitation of CVE-2018-9415?
No, user interaction is not needed for exploitation of CVE-2018-9415.
How can I fix CVE-2018-9415?
To fix CVE-2018-9415, update your Android kernel to version 4.15.0-33.36 or higher.