In __unregister_prot_hook and packet_release of af_packet.c, there is a
possible use-after-free due to improper locking. This could lead to local
escalation of privilege in the kernel with System execution privileges
needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Dec 2024 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
Thu, 05 Dec 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Google
Google android Google pixel |
|
Weaknesses | CWE-416 | |
CPEs | cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:* cpe:2.3:o:google:android:*:*:*:*:*:*:*:* |
|
Vendors & Products |
Google
Google android Google pixel |
|
Metrics |
cvssV3_1
|
Wed, 04 Dec 2024 23:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2024-12-04T23:37:42.619Z
Updated: 2024-12-05T15:33:21.903Z
Reserved: 2018-04-05T00:00:00.000Z
Link: CVE-2018-9439
Vulnrichment
Updated: 2024-12-05T15:33:14.154Z
NVD
Status : Analyzed
Published: 2024-12-05T00:15:18.337
Modified: 2024-12-19T16:34:09.840
Link: CVE-2018-9439
Redhat
No data.