In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Sep 3, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-sourceUpgrade perf | Jul 31, 2020 | Jan 8, 2020 |
| Ubuntu | — | Upgrade linux-gke-5.0Upgrade linux-raspi2-5.3Upgrade linux-gke-4.15Upgrade linux-oracleUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-aws-5.3Upgrade linux-gcp-5.3Upgrade linux-oem-osp1Upgrade linux-oracle-5.3Upgrade linux-azure-5.3Upgrade linux-gke-5.3Upgrade linux-raspi2Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-awsUpgrade linux-hweUpgrade linux-oemUpgrade linux-azure-fipsUpgrade linux-lts-xenialUpgrade linuxUpgrade linux-azure | Nov 19, 2024 | Jan 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub