In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 6, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Sep 6, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools-libs | Mar 23, 2020 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Sep 6, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | May 15, 2020 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-snapdragonUpgrade linux-oemUpgrade linux-gke-4.15Upgrade linuxUpgrade linux-awsUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-lts-xenialUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-gcp | Nov 19, 2024 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub