In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-devel | Aug 25, 2020 | Sep 6, 2019 |
| Debian | — | Upgrade linux | Nov 2, 2020 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade python-perf | Jul 31, 2020 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1097-oemUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-virtualUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-awsUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1096-azureUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-4.15.0-118-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragon | Sep 22, 2020 | Sep 6, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub