In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Dec 7, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Mar 24, 2021 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade kernel-kvmsmall-baseUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-debug-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-vanilla-livepatch-devel | Sep 23, 2021 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-powerpc-e500mc-lts-xenial | Apr 9, 2019 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub