In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 23, 2022 | Dec 14, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64 | Sep 16, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Apr 30, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | May 19, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-devel | Feb 2, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 5, 2021 | Dec 14, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 6, 2021 | Jan 18, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 23, 2022 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-pae-baseUpgrade kernel-devel-rtUpgrade kernel-preemptUpgrade kernel-livepatch-4_12_14-197_72-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-ppc64Upgrade cluster-md-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-xen-baseUpgrade kernel-rtUpgrade dlm-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-macrosUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-xen-develUpgrade kernel-64kb-extraUpgrade kernel-ppc64-develUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade ocfs2-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-default-optionalUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-64kb-develUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-default-extraUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade gfs2-kmp-rt_debugUpgrade cluster-network-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_9-defaultUpgrade kernel-preempt-extraUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-livepatch-5_3_18-24_15-defaultUpgrade kselftests-kmp-rt_debugUpgrade reiserfs-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-ec2-baseUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kernel-rt-develUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-trace-baseUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-traceUpgrade kernel-bigmem-baseUpgrade kernel-trace-develUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-rt_debug-extraUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-vanilla-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kernel-bigmem-develUpgrade kernel-ec2Upgrade kernel-default-livepatch-develUpgrade kernel-xenUpgrade kernel-kvmsmall-baseUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-pae-develUpgrade kernel-vanillaUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade kernel-livepatch-4_12_14-197_64-defaultUpgrade kernel-default-kgraftUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-bigmemUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-livepatch-5_3_18-24_12-defaultUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-preempt-optional | Jan 13, 2021 | Dec 14, 2020 |
| Ubuntu | — | Upgrade linux-image-5.6.0-1053-oemUpgrade linux-image-oem-20.04 | Apr 14, 2021 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub