In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jun 12, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Dec 31, 2018 | Jun 12, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade perf | Apr 3, 2019 | Jun 12, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Dec 2, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jun 12, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-build | Jun 21, 2018 | Jun 12, 2018 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azureUpgrade linux-awsUpgrade linux-hweUpgrade linux-gke-4.15Upgrade linux-lts-xenialUpgrade linux-oemUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-azure-fde-5.15Upgrade linux-kvmUpgrade linux-aws-fips | Nov 19, 2024 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub