CVE-2018-3584

Vulnerability

A use-after-free (UAF) condition exists in the rmnet_usb_ctrl_init() function of the Qualcomm kernel used in Android for MSM, Firefox OS for MSM, and QRD Android devices running all Android releases from CAF before the security patch level 2018-04-05. This bug occurs when the driver improperly handles memory freeing or reuse, allowing an attacker to manipulate freed memory.

Exploitation

An attacker with local access and the ability to execute code on the device may exploit this vulnerability. The UAF condition can be triggered by invoking specific sequences that cause the driver to dereference already freed memory, potentially leading to further exploitation.

Impact

Successful exploitation could allow an attacker to escalate privileges from a low-privileged process to a higher-privileged context, potentially achieving arbitrary code execution in kernel space. This could result in a full compromise of the device's confidentiality, integrity, and availability [1].

Mitigation

Google released a security patch in the April 2018 Pixel/Nexus Security Bulletin [1]. All affected devices should update to the Android security patch level 2018-04-05 or later. No workaround is provided; flashing the updated firmware is the recommended action.