In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfo | Apr 25, 2025 | Apr 12, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade cluster-md-kmp-preemptUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-alUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-preemptUpgrade dtb-zteUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-preemptUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kselftests-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-livepatch-5_3_18-150300_59_68-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dlm-kmp-azure | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-gke-5.4Upgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linuxUpgrade linux-gkeop-5.4Upgrade linux-azure-fdeUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-azure-5.4 | Nov 19, 2024 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub