In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.192-147.314Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | Aug 25, 2020 | Sep 6, 2019 |
| Debian | — | Upgrade linux | Nov 2, 2020 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-source | Jul 31, 2020 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1096-azureUpgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-118-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-azure-edgeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-generic-hwe-16.04 | Sep 22, 2020 | Sep 6, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub