In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Dec 7, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-headers | Mar 24, 2021 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdump-manUpgrade kernel-debug-baseUpgrade kernel-docsUpgrade kernel-vanillaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-manUpgrade kernel-default-extra | Sep 23, 2021 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-144-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-virtualUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-144-powerpc64-emb | Apr 9, 2019 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub