Skip to content
OpenAdvisories
Unscored CVE-2018-9518 EUVD-2018-21112GHSA-37mc-f722-26x4

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to l…

Published Dec 7, 2018 · Updated Aug 5, 2024 · Assigned by google_android

Vendor: Google Product: Android Package: linux Package: linux Package: linux-aws Package: linux-azure Package: linux-azure-fde Package: linux-fips Package: linux-gcp Package: linux-gke Package: linux-hwe Package: linux-intel-iot-realtime Package: linux-kvm Package: linux-lts-xenial Package: linux-oem Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-snapdragon Platform: Android Ecosystem: Debian Ecosystem: Ubuntu

Description

In nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-73083945.

Affected products

VendorProductAffectedFixed
Google Android Android Kernel —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 linux 4.16.5-1 —
Debian 13 linux 4.16.5-1 —
Debian 12 linux 4.16.5-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-34.37 —
Ubuntu 18.04 LTS linux-aws +1 4.15.0-1021.21 —
Ubuntu 18.04 LTS linux-azure 4.15.0-1023.24 —
Ubuntu 18.04 LTS linux-gcp 4.15.0-1019.20 —
Ubuntu 18.04 LTS linux-oem 4.15.0-1018.21 —
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1022.24 —
Ubuntu 16.04 LTS linux 4.4.0-130.156 —
Ubuntu 16.04 LTS linux-aws 4.4.0-1062.71 —
Ubuntu 16.04 LTS linux-azure 4.15.0-1023.24~16.04.1 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1019.20~16.04.1 —
Ubuntu 16.04 LTS linux-hwe 4.15.0-34.37~16.04.1 —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1029.34 —
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1092.100 —
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1095.100 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS linux 3.13.0-161.211 USN-3798-1
Ubuntu 14.04 LTS linux-aws 4.4.0-1024.25 —
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-130.156~14.04.1 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —

Advisories 1

References