In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | May 30, 2022 | Dec 15, 2021 |
| Suse | — | Upgrade kernel-livepatch-5_3_18-150300_59_60-defaultUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-default-kgraftUpgrade kernel-default-baseUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-develUpgrade kernel-livepatch-4_12_14-197_105-defaultUpgrade kernel-symsUpgrade kernel-livepatch-5_3_18-24_102-defaultUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-baseUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-optionalUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade kernel-livepatch-5_3_18-150300_59_49-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kgraft-patch-4_12_14-122_110-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-vanillaUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-livepatch-4_12_14-150_83-defaultUpgrade kernel-preempt-develUpgrade kernel-debug-baseUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-kgraft-develUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade dtb-zteUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade kgraft-patch-4_12_14-95_88-defaultUpgrade dlm-kmp-preemptUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kselftests-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-alUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-azure | Feb 11, 2022 | Dec 15, 2021 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oem-5.10Upgrade linux-azure-fde-5.15Upgrade linux-gkeUpgrade linux-aws-hweUpgrade linux-gcp-5.4Upgrade linux-gke-5.4Upgrade linux-oracleUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-snapdragonUpgrade linux-gkeop-5.4Upgrade linux-azureUpgrade linux-lts-xenialUpgrade linux-raspi-5.4Upgrade linux-azure-fdeUpgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-dell300xUpgrade linux-azure-5.4Upgrade linux-raspi2Upgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-awsUpgrade linux-gcp-4.15 | Nov 19, 2024 | Dec 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub