In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Oct 1, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Oct 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-devel | May 30, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools | May 30, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 4, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 7, 2019 | Nov 6, 2018 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-defaultUpgrade kernel-obs-build | Nov 10, 2018 | Oct 1, 2018 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-45-genericUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-45-generic-lpae | Feb 5, 2019 | Oct 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub