In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Oct 1, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Oct 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-headers | May 30, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perf | May 30, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 4, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 7, 2019 | Nov 6, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-default | Nov 10, 2018 | Oct 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem | Feb 5, 2019 | Oct 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub