In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 14, 2020 |
| Centos_linux | — | Upgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Dec 14, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 8, 2021 | Jan 18, 2021 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 14, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 8, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rt_debugUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-kgraftUpgrade kernel-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dlm-kmp-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-vanillaUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-rt_debug-extraUpgrade cluster-md-kmp-rt_debugUpgrade kernel-symsUpgrade kernel-preemptUpgrade kernel-sourceUpgrade gfs2-kmp-rt_debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rt_debugUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade ocfs2-kmp-rt_debugUpgrade kernel-rtUpgrade cluster-network-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optional | Jan 13, 2021 | Dec 14, 2020 |
| Ubuntu | — | Upgrade linux-raspi2-5.3Upgrade linuxUpgrade linux-gke-5.0Upgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-hweUpgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-kvmUpgrade linux-gke-5.3Upgrade linux-raspi2Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-snapdragonUpgrade linux-fips | Nov 19, 2024 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub