In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel | Apr 25, 2025 | Apr 12, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-livepatch-5_3_18-150300_59_68-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade gfs2-kmp-preemptUpgrade kernel-obs-buildUpgrade kernel-preempt-optionalUpgrade dtb-marvellUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade kernel-preempt-extraUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade dtb-zteUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-symsUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade dtb-alUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade dtb-qcom | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-gke-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-gkeop-5.4Upgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linuxUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-azure-fde | Nov 19, 2024 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub