FlawAtlas
Search the atlas
UBUNTU-CVE-2018-9415 High

UBUNTU-CVE-2018-9415

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.

Exploit probability Not scored
Published July 3, 2018
Required by Not available
Last source change April 22, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS linux-aws

13 explicit affected versions

Ubuntu:14.04:LTS linux-lts-xenial

53 explicit affected versions

Ubuntu:16.04:LTS linux

75 explicit affected versions

Ubuntu:16.04:LTS linux-aws

34 explicit affected versions

Ubuntu:16.04:LTS linux-azure

20 explicit affected versions

Ubuntu:16.04:LTS linux-gcp

18 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

38 explicit affected versions

Ubuntu:16.04:LTS linux-kvm

14 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

48 explicit affected versions

Ubuntu:16.04:LTS linux-snapdragon

45 explicit affected versions

Ubuntu:18.04:LTS linux

16 explicit affected versions

Ubuntu:18.04:LTS linux-aws

11 explicit affected versions

Ubuntu:18.04:LTS linux-azure

11 explicit affected versions

Ubuntu:18.04:LTS linux-gcp

10 explicit affected versions

Ubuntu:18.04:LTS linux-kvm

11 explicit affected versions

Ubuntu:18.04:LTS linux-oem

8 explicit affected versions

Ubuntu:18.04:LTS linux-raspi2

12 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:20.04:LTS linux-riscv

12 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

Ubuntu:Pro:FIPS:16.04:LTS linux-fips

3 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2018-9415

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.

View original source

05 / REFERENCES

Further evidence