Possible Use-After-Free Vulnerability in af_packet.c Leads to Local Escalation of Privilege
CVE-2018-9439

6.7MEDIUM

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
5 December 2024

What is CVE-2018-9439?

An issue exists in the Android operating system's kernel due to improper locking in the functions __unregister_prot_hook and packet_release within af_packet.c. This vulnerability may allow local attackers to escalate their privileges, gaining elevated permissions on the system without the need for user interaction. Exploitation could enable unauthorized actions at the system level, impacting overall system security and integrity. It is essential for users and organizations using affected versions to apply security updates to mitigate the risks associated with this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android Kernel

References

https://source.android.com/security/bulletin/pixel/2018-0...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.