In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs | Sep 3, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade python3-perfUpgrade kernel-sourceUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jul 31, 2020 | Jan 8, 2020 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-oemUpgrade linuxUpgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-gke-4.15Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gke-5.3Upgrade linux-aws-5.3Upgrade linux-raspi2-5.3Upgrade linux-oracleUpgrade linux-gke-5.0Upgrade linux-oracle-5.3Upgrade linux-oem-osp1Upgrade linux-gcp-5.3Upgrade linux-azure-5.3Upgrade linux-raspi2 | Nov 19, 2024 | Jan 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub