In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111761954References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 29, 2019 | May 29, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-devel-azure | Apr 1, 2019 | Mar 26, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1050-oem | Aug 14, 2019 | Mar 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub