In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 8, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 8, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1050-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-157-genericUpgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-lowlatency-lts-xenial | Jul 26, 2019 | May 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub