In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-4.4.0-1114-awsUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-generic | Sep 22, 2020 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub