In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 11, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Jan 11, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-source | May 18, 2021 | Jan 11, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Feb 8, 2021 | Jan 11, 2021 |
| Oracle_linux | — | Upgrade kernel | May 26, 2021 | Jan 11, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 21, 2021 | Jan 11, 2021 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-livepatch-4_12_14-197_64-defaultUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-defaultUpgrade kernel-livepatch-5_3_18-22-defaultUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-preempt-optionalUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-sourceUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kernel-default-optionalUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-livepatch-4_12_14-197_72-defaultUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-default | Feb 6, 2021 | Jan 11, 2021 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gke-5.3Upgrade linux-snapdragonUpgrade linuxUpgrade linux-oem-5.6Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-awsUpgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-raspi2-5.3Upgrade linux-raspi-5.4Upgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-aws-hweUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-raspi2Upgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-gke-5.0Upgrade linux-oracleUpgrade linux-fips | Nov 19, 2024 | Jan 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub