CVE-2018-9385

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
google_androidCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
VendorProductVersion
googleandroid
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
jessie
not-affected
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
cosmic
not-affected
bionic
Fixed 4.15.0-33.36
released
xenial
Fixed 4.4.0-128.154
released
trusty
not-affected
linux-aws
cosmic
not-affected
bionic
Fixed 4.15.0-1020.20
released
xenial
Fixed 4.4.0-1061.70
released
trusty
Fixed 4.4.0-1023.23
released
linux-azure
cosmic
not-affected
bionic
Fixed 4.15.0-1022.23
released
xenial
Fixed 4.15.0-1022.22~16.04.1
released
trusty
not-affected
linux-azure-edge
cosmic
dne
bionic
not-affected
xenial
Fixed 4.15.0-1022.23
released
trusty
dne
linux-euclid
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-flo
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gcp
cosmic
not-affected
bionic
Fixed 4.15.0-1018.19
released
xenial
Fixed 4.15.0-1018.19~16.04.2
released
trusty
dne
linux-gke
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-goldfish
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-grouper
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe
cosmic
dne
bionic
not-affected
xenial
Fixed 4.15.0-33.36~16.04.1
released
trusty
dne
linux-hwe-edge
cosmic
dne
bionic
not-affected
xenial
Fixed 4.15.0-33.36~16.04.1
released
trusty
dne
linux-kvm
cosmic
not-affected
bionic
Fixed 4.15.0-1020.20
released
xenial
Fixed 4.4.0-1027.32
released
trusty
dne
linux-lts-trusty
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-utopic
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-vivid
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-wily
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-xenial
cosmic
dne
bionic
dne
xenial
dne
trusty
Fixed 4.4.0-128.154~14.04.1
released
linux-maguro
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-mako
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-manta
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
cosmic
not-affected
bionic
Fixed 4.15.0-1017.20
released
xenial
ignored
trusty
dne
linux-raspi2
cosmic
not-affected
bionic
Fixed 4.15.0-1021.23
released
xenial
Fixed 4.4.0-1091.99
released
trusty
dne
linux-snapdragon
cosmic
dne
bionic
not-affected
xenial
Fixed 4.4.0-1094.99
released
trusty
dne
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/105887
https://source.android.com/security/bulletin/pixel/2018-06-01
http://www.securityfocus.com/bid/105887
https://source.android.com/security/bulletin/pixel/2018-06-01