In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Nov 3, 2020 | Sep 17, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 3, 2020 | Sep 17, 2020 |
| Suse | — | Upgrade kernel-kvmsmall-baseUpgrade kernel-default-develUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dlm-kmp-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-source-azureUpgrade kernel-develUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-5_3_18-24_24-defaultUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-rt_debugUpgrade kernel-azureUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade cluster-md-kmp-rt_debugUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-rt_debugUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rt_debugUpgrade kernel-default-baseUpgrade gfs2-kmp-rt_debugUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade cluster-network-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-rt_debug-extraUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-vanillaUpgrade kernel-default-kgraftUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-syms-rt | Feb 7, 2021 | Sep 17, 2020 |
| Ubuntu | — | Upgrade linux-gke-4.15Upgrade linux-raspi2-5.3Upgrade linux-raspi2Upgrade linux-oem-osp1Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-gke-5.3Upgrade linuxUpgrade linux-aws-hweUpgrade linux-snapdragonUpgrade linux-oemUpgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-lts-xenialUpgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-hweUpgrade linux-gke-5.0 | Nov 19, 2024 | Sep 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub