Unrated severityNVD Advisory· Published Dec 7, 2018· Updated Aug 5, 2024

CVE-2018-9517

Description

In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

115

Google/Kernelllm-fuzzy
osv-coords113 versions
pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-vanilla&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/kernel-livepatch-SLE15-SP1_Update_27&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1 pkg:rpm/suse/kernel-livepatch-SLE15_Update_26&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kgraft-patch-SLE12-SP4_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4 pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
< 4.12.14-197.102.2+ 112 more
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-16.73.2
- (no CPE)range: < 4.12.14-16.73.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 3.0.101-108.141.1
- (no CPE)range: < 4.4.121-92.199.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 3.0.101-108.141.1
- (no CPE)range: < 1-3.3.1
- (no CPE)range: < 1-1.3.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-122.88.2
- (no CPE)range: < 4.12.14-10.57.2
- (no CPE)range: < 4.12.14-10.57.2
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 3.0.101-108.141.1
- (no CPE)range: < 4.4.121-92.199.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-10.57.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 3.0.101-108.141.1
- (no CPE)range: < 4.4.121-92.199.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-10.57.1
- (no CPE)range: < 3.0.101-108.141.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 3.0.101-108.141.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 1-6.3.1
- (no CPE)range: < 1-8.5.1
Google/Androidv5
Range: Android Kernel

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2019:2029mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2019:2043mitrevendor-advisoryx_refsource_REDHAT
usn.ubuntu.com/3932-1/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3932-2/mitrevendor-advisoryx_refsource_UBUNTU
source.android.com/security/bulletin/pixel/2018-09-01mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000