NetSight
IP …
high7.8

CVE-2018-9568

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion.

Impact

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

Affected products

VendorProductAffected versions
GoogleAndroid
All versions
CanonicalUbuntu Linux
Versions 12.04, 14.04
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Version 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Version 7.0
LinuxLinux Kernel
before 3.10.108
from 3.11 before 3.16.58
from 3.17 before 3.18.77
from 3.19 before 4.1.46
from 4.2 before 4.4.94
from 4.5 before 4.9.55

Weakness classification

CWE-704

References