An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31651010.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2017 | Jan 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 25, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Aug 16, 2018 | Jan 12, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-126-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-126-powerpc-smpUpgrade linux-image-3.13.0-126-powerpc-e500mcUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-126-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-126-powerpc64-embUpgrade linux-image-3.13.0-126-genericUpgrade linux-image-3.13.0-126-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-126-powerpc-e500Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-lpae | Jul 21, 2017 | Jan 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub