In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Dec 7, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Mar 24, 2021 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Sep 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdump-manUpgrade kernel-defaultUpgrade kernel-vanilla-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extra | Sep 23, 2021 | Dec 7, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-1106-raspi2 | Apr 9, 2019 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub