In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 6, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Sep 6, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-sourceUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Mar 23, 2020 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Sep 6, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | May 15, 2020 | Sep 6, 2019 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-oemUpgrade linuxUpgrade linux-gke-4.15Upgrade linux-raspi2Upgrade linux-awsUpgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-lts-xenialUpgrade linux-hweUpgrade linux-oracleUpgrade linux-azureUpgrade linux-gcp | Nov 19, 2024 | Sep 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub