Not rated
CVE-2018-9422 In get_futex_key of futex.c, there is a use-after-free due to improper locking
Description
In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | Versions not published |
References
- [debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update lists.debian.org
- [debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update lists.debian.org
- source.android.com source.android.com
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified
Other CVEs of Android
The 960 CVEs of Android →
CVE-2018-9575
In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of bounds write due to missing…
Not rated
CVE-2018-9573
In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds…
Not rated
CVE-2018-9578
In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing…
Not rated
CVE-2018-9570
In impd_parse_drc_ext_v1 of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing bounds…
Not rated