In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204450605References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Mar 9, 2023 | Jan 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade perf | Mar 29, 2022 | Jan 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 15, 2022 | Jan 14, 2022 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-dell300xUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-gke-5.4Upgrade linux-snapdragonUpgrade linux-raspi2Upgrade linux-fipsUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-azure-fdeUpgrade linux-lts-xenialUpgrade linux-gkeop-5.4Upgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-aws | Nov 19, 2024 | Jan 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub