In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-devel | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Oct 1, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Oct 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perf | May 30, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 30, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 4, 2019 | Sep 14, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Nov 6, 2018 |
| Suse | — | Upgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade cluster-network-kmp-default | Nov 10, 2018 | Oct 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-45-genericUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-snapdragonUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-kvmUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws | Feb 5, 2019 | Oct 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub