In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-66954097.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Dec 5, 2019 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Apr 16, 2020 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-devel | Dec 11, 2019 | Jan 12, 2018 |
| Ubuntu | — | Upgrade linux-fips | Feb 11, 2025 | Jan 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub