CVE-2018-9515

In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-111641492 References: N/A

Affected products

Android Kernel

Google Android

All versions

Fix

Available

CVSS 3.0

7.8 HIGH

EPSS

0.7% (51th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2018-10-02