In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 14, 2020 |
| Centos_linux | — | Upgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 5, 2021 | Dec 14, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 8, 2021 | Jan 18, 2021 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 14, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 8, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rt_debugUpgrade kernel-obs-qaUpgrade kselftests-kmp-rt_debugUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-kvmsmallUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rt_debugUpgrade kernel-rt_debug-extraUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-azure-baseUpgrade kernel-debug-baseUpgrade kernel-default-baseUpgrade kernel-vanilla-develUpgrade kernel-default-kgraftUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-kvmsmall-baseUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-vanilla-baseUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rt_debugUpgrade kernel-preempt-optionalUpgrade kernel-obs-buildUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-extraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-source-rtUpgrade kernel-rt-devel | Jan 13, 2021 | Dec 14, 2020 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-kvmUpgrade linuxUpgrade linux-azureUpgrade linux-gke-5.0Upgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-lts-xenialUpgrade linux-raspi2-5.3Upgrade linux-gcpUpgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-gke-5.3Upgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-raspi2 | Nov 19, 2024 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub