In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfo | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Oct 1, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Oct 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | May 30, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel | May 30, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 4, 2019 | Sep 14, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Nov 6, 2018 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-defaultUpgrade ocfs2-kmp-default | Nov 10, 2018 | Oct 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-44-genericUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-awsUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-44-snapdragon | Feb 5, 2019 | Oct 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub