In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-120612905References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Aug 18, 2022 | Dec 15, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2021 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-223-lowlatencyUpgrade linux-image-4.4.0-223-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1103-awsUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-4.4.0-1104-kvmUpgrade linux-image-generic | Apr 1, 2022 | Dec 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub