In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152409173
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Jul 19, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 5, 2021 | Dec 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azureUpgrade linux-hweUpgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-snapdragonUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-kvmUpgrade linux-gcp | Nov 19, 2024 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub