CVE-2018-9515

HIGH

Android - Memory Corruption in sdcardfs inode Operations

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2018-9515. PoCs published by Google Security Research, codecat007.

AI-analyzed exploit summary This exploit demonstrates a race condition in the sdcardfs filesystem implementation in the Android kernel, leading to a denial-of-service (DoS) condition. The vulnerability arises from improper handling of the task lock when modifying the `current->fs` structure, causing kernel crashes.

Description

In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-111641492 References: N/A

Exploits (2)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdosandroid
https://www.exploit-db.com/exploits/45558

This exploit demonstrates a race condition in the sdcardfs filesystem implementation in the Android kernel, leading to a denial-of-service (DoS) condition. The vulnerability arises from improper handling of the task lock when modifying the `current->fs` structure, causing kernel crashes.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android kernel (sdcardfs module) on versions using the vulnerable code (e.g., Pixel 2 with kernel 4.4.88)
No auth needed
Prerequisites: Access to an Android device with sdcardfs support · Ability to execute binaries on the device (e.g., via ADB)
devstral-2 · analyzed Feb 16, 2026 Full analysis →
github WORKING POC 8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/securityPatch/CVE-2018-9515

This PoC exploits a use-after-free (UAF) vulnerability in the Linux kernel's filesystem handling by manipulating directory operations and symlinks. The code creates a race condition between threads to trigger the UAF, demonstrating the vulnerability in Android systems.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Racy
Target: Linux kernel (Android)
No auth needed
Prerequisites: Access to the target system's filesystem · Ability to execute code on the target system
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/45558/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/105483
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2018-10-01

Scores

CVSS v3 7.8
EPSS 0.0073
EPSS Percentile 73.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
google/android
Published Oct 02, 2018
Tracked Since Feb 18, 2026