In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-headers | May 13, 2022 | Oct 25, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Oct 25, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Apr 20, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftool | Mar 29, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Mar 3, 2022 | Oct 25, 2021 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Feb 13, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Oct 25, 2021 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debuginfo | Mar 5, 2024 | Oct 25, 2021 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-zteUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-develUpgrade ocfs2-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade dtb-alteraUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade reiserfs-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-vanilla-baseUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kernel-default-baseUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-preempt-extraUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kernel-preemptUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-default-man | Nov 25, 2021 | Oct 25, 2021 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-gkeop-5.4Upgrade linux-bluefieldUpgrade linux-azure-fdeUpgrade linux-snapdragonUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-oem-5.10Upgrade linux-awsUpgrade linux-gke-5.4Upgrade linux-gkeUpgrade linux-raspi2Upgrade linuxUpgrade linux-hwe-5.8Upgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-azureUpgrade linux-dell300xUpgrade linux-hweUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-gkeopUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-azure-5.4 | Nov 19, 2024 | Oct 25, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub