In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfo | Apr 27, 2020 | Nov 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Oct 1, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 6, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Oct 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel | May 30, 2019 | Nov 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf | May 30, 2019 | Nov 6, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 4, 2019 | Sep 14, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Nov 6, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade dlm-kmp-default | Nov 10, 2018 | Oct 1, 2018 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-45-lowlatency | Feb 5, 2019 | Oct 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub