In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 14, 2020 |
| Centos_linux | — | Upgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 5, 2021 | Dec 14, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 8, 2021 | Jan 18, 2021 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 14, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade ocfs2-kmp-rt_debugUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rt_debugUpgrade ocfs2-kmp-rtUpgrade cluster-network-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade kernel-rt_debug-extraUpgrade kernel-vanillaUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-sourceUpgrade cluster-md-kmp-rt_debugUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-develUpgrade dlm-kmp-rt_debugUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-azureUpgrade kernel-preempt-extraUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-baseUpgrade dlm-kmp-rt | Jan 13, 2021 | Dec 14, 2020 |
| Ubuntu | — | Upgrade linux-gke-4.15Upgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-aws-fipsUpgrade linux-raspi2-5.3Upgrade linux-gke-5.0Upgrade linux-azureUpgrade linux-kvmUpgrade linux-oem-osp1Upgrade linuxUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-gke-5.3Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux-snapdragonUpgrade linux-aws-hwe | Nov 19, 2024 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub