In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 17, 2020 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kernel-debugUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-develUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kernel-macrosUpgrade kernel-vanillaUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-debug-base | Feb 7, 2021 | Sep 17, 2020 |
| Ubuntu | — | Upgrade linux-raspi2Upgrade linux-awsUpgrade linux-oemUpgrade linux-gcpUpgrade linux-hweUpgrade linuxUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-azure | Nov 19, 2024 | Sep 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub