In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 6, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Sep 6, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headers | Mar 23, 2020 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Sep 6, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | May 15, 2020 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-raspi2Upgrade linux-gke-4.15Upgrade linux-snapdragonUpgrade linux-fipsUpgrade linux-awsUpgrade linux-aws-hweUpgrade linuxUpgrade linux-oemUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-lts-xenialUpgrade linux-azureUpgrade linux-oracleUpgrade linux-hwe | Nov 19, 2024 | Sep 6, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub