In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 14, 2020 |
| Centos_linux | — | Upgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 5, 2021 | Dec 14, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 8, 2021 | Jan 18, 2021 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 14, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 8, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-vanillaUpgrade kernel-obs-qaUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-preemptUpgrade gfs2-kmp-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-sourceUpgrade cluster-network-kmp-defaultUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-debug-baseUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rt_debugUpgrade kernel-source-azureUpgrade ocfs2-kmp-rt_debugUpgrade kernel-syms-rtUpgrade kernel-rt_debug-extraUpgrade kselftests-kmp-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade dlm-kmp-rt_debugUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-rt_debugUpgrade kernel-preempt-extraUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-default-kgraftUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-64kb-extraUpgrade kernel-vanilla-baseUpgrade kernel-docsUpgrade kernel-vanilla-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade ocfs2-kmp-default | Jan 13, 2021 | Dec 14, 2020 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-lts-xenialUpgrade linux-raspi2-5.3Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-awsUpgrade linux-azureUpgrade linux-kvmUpgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-gke-5.0Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-gke-5.3Upgrade linux-raspi2Upgrade linux-snapdragonUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-aws-hwe | Nov 19, 2024 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub