In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-debuginfo-common-aarch64 | Aug 25, 2020 | Sep 6, 2019 |
| Debian | — | Upgrade linux | Nov 2, 2020 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-sourceUpgrade perfUpgrade kernel-headers | Jul 31, 2020 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-118-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1096-azureUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenial | Sep 22, 2020 | Sep 6, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub