In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 11, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Jan 11, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perf | May 18, 2021 | Jan 11, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Feb 8, 2021 | Jan 11, 2021 |
| Oracle_linux | — | Upgrade kernel | May 26, 2021 | Jan 11, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 21, 2021 | Jan 11, 2021 |
| Suse | — | Upgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kernel-docs-htmlUpgrade kernel-preempt-extraUpgrade kernel-azure-develUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade kernel-preempt-develUpgrade kernel-default-base-rebuildUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-livepatch-4_12_14-197_64-defaultUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kernel-sourceUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kernel-syms-azureUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-livepatch-4_12_14-197_72-defaultUpgrade kernel-default-devel | Feb 6, 2021 | Jan 11, 2021 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gke-4.15Upgrade linux-oem-5.6Upgrade linux-raspi2-5.3Upgrade linux-snapdragonUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-oem-osp1Upgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-gke-5.3Upgrade linuxUpgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-gke-5.0 | Nov 19, 2024 | Jan 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub