In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 17, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 18, 2021 | Sep 17, 2020 |
| Debian | — | Upgrade linux | Dec 18, 2020 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Sep 16, 2021 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Apr 30, 2021 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Feb 3, 2021 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftool | Feb 2, 2021 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 5, 2021 | Sep 17, 2020 |
| Oracle_linux | — | Upgrade kernel | Mar 18, 2021 | Nov 22, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 18, 2021 | Sep 17, 2020 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-vanillaUpgrade reiserfs-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rt_debugUpgrade kernel-debugUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rt_debugUpgrade gfs2-kmp-rt_debugUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade kernel-livepatch-5_3_18-24_24-defaultUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-debug-baseUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dlm-kmp-rt_debugUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-vanilla-develUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-vanilla-baseUpgrade kernel-source-rtUpgrade kernel-default-kgraftUpgrade ocfs2-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-base | Feb 7, 2021 | Sep 17, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-smp | Dec 2, 2020 | Sep 17, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub