In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Dec 7, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Mar 24, 2021 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-kvmsmall-baseUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-baseUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-vanillaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-baseUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-default | Sep 23, 2021 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-smp | Apr 9, 2019 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub