In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Sep 3, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-sourceUpgrade perfUpgrade kernel-headersUpgrade python-perf | Jul 31, 2020 | Jan 8, 2020 |
| Ubuntu | — | Upgrade linux-azure-5.3Upgrade linux-gke-5.3Upgrade linux-raspi2Upgrade linux-raspi2-5.3Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-gke-4.15Upgrade linux-fipsUpgrade linux-gke-5.0Upgrade linux-oem-osp1Upgrade linux-oracleUpgrade linux-aws-5.3Upgrade linux-gcp-5.3Upgrade linux-oracle-5.3Upgrade linux-oemUpgrade linux-azureUpgrade linux-hweUpgrade linux-aws-hweUpgrade linux-awsUpgrade linux-snapdragonUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-lts-xenial | Nov 19, 2024 | Jan 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub