In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 14, 2020 |
| Centos_linux | — | Upgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 5, 2021 | Dec 14, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 8, 2021 | Jan 18, 2021 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 14, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-default-kgraftUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rt_debugUpgrade kernel-preempt-extraUpgrade kernel-devel-rtUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-default-livepatchUpgrade kernel-preempt-optionalUpgrade dlm-kmp-rt_debugUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-vanilla-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-preempt-develUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-docsUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rt_debugUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade gfs2-kmp-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-vanillaUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-default-develUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-default-extraUpgrade kernel-debug-baseUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-extraUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rt_debugUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rt_debugUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-base | Jan 13, 2021 | Dec 14, 2020 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-gke-5.3Upgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux-snapdragonUpgrade linux-gcpUpgrade linux-azureUpgrade linux-awsUpgrade linux-kvmUpgrade linux-hweUpgrade linux-gke-5.0Upgrade linux-raspi2-5.3Upgrade linux-gke-4.15Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-oem-osp1Upgrade linux-lts-xenial | Nov 19, 2024 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub