In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-devel | Apr 25, 2025 | Apr 12, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-preemptUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade dtb-qcomUpgrade kernel-preempt-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade dtb-zteUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-livepatch-5_3_18-150300_59_68-defaultUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-preempt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade gfs2-kmp-preemptUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-amd | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-gkeop-5.4Upgrade linux-azure-fdeUpgrade linux-azureUpgrade linux-gcpUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-raspiUpgrade linux-gkeUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-gke-5.4Upgrade linux-gcp-5.4 | Nov 19, 2024 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub