In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 28, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernel | Nov 19, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perf | Dec 11, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 4, 2019 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docs-azureUpgrade kernel-devel-azureUpgrade kernel-source-azure | Sep 17, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-awsUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-4.15.0-1027-awsUpgrade linux-image-kvmUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1031-azureUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-3.13.0-162-powerpc-smp | Oct 31, 2018 | Aug 28, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub