CVE-2018-9568 Memory corruption in Android

High 7.8 Published 6 Dec 2018 Updated 5 Aug 2024

A type confusion vulnerability in the Android kernel allows local attackers to escalate privileges without user interaction.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2018-9568?

CVE-2018-9568 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 6 Dec 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

Weakness: CWE-704

Which versions are affected by CVE-2018-9568?

It affects 9 products.

Linux distribution packages (7)

`kgraft-patch-SLE12-SP1_Update_29` SUSE:Linux Enterprise Server 12 SP1-LTSS	All versions	`7-2.1`
`kgraft-patch-SLE12-SP1_Update_30` SUSE:Linux Enterprise Server 12 SP1-LTSS	All versions	`6-2.1`
`kgraft-patch-SLE12-SP1_Update_31` SUSE:Linux Enterprise Server 12 SP1-LTSS	All versions	`4-2.1`
`kgraft-patch-SLE12-SP1_Update_32` SUSE:Linux Enterprise Server 12 SP1-LTSS	All versions	`4-2.1`
`kgraft-patch-SLE12_Update_36` SUSE:Linux Enterprise Server 12-LTSS	All versions	`7-2.1`
`kgraft-patch-SLE12_Update_37` SUSE:Linux Enterprise Server 12-LTSS	All versions	`6-2.1`
`kgraft-patch-SLE12_Update_38` SUSE:Linux Enterprise Server 12-LTSS	All versions	`4-2.1`

Products include Canonical Ubuntu Linux, Google Android, Linux kernel, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus and 3 more.

How do I fix CVE-2018-9568?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-9568 being exploited?

There is no known exploitation of CVE-2018-9568 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2018-9568, GHSA-8hfc-fgjc-59xp, SUSE-SU-2018:4154-1, SUSE-SU-2018:4158-1, SUSE-SU-2018:4196-1, UBUNTU-CVE-2018-9568.