In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111761954References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 29, 2019 | May 29, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-source-azure | Apr 1, 2019 | Mar 26, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-awsUpgrade linux-image-snapdragon | Aug 14, 2019 | Mar 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub