In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade perf-debuginfo | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Oct 1, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Oct 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perf | May 30, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | May 30, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 4, 2019 | Sep 14, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Nov 6, 2018 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extra | Nov 10, 2018 | Oct 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-genericUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-44-generic | Feb 5, 2019 | Oct 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub