In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Dec 7, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Mar 24, 2021 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-debug-baseUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-default | Sep 23, 2021 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenial | Apr 9, 2019 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub