In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | May 30, 2022 | Dec 15, 2021 |
| Suse | — | Upgrade kernel-preempt-extraUpgrade kernel-livepatch-4_12_14-150_83-defaultUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade dtb-rockchipUpgrade dtb-alUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-vanilla-baseUpgrade dtb-qcomUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-zteUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-kgraft-develUpgrade dlm-kmp-preemptUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kgraft-patch-4_12_14-95_88-defaultUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-vanillaUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kgraft-patch-4_12_14-122_110-defaultUpgrade dtb-renesasUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kernel-livepatch-5_3_18-150300_59_60-defaultUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-default-kgraftUpgrade kernel-zfcpdump-manUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-livepatch-5_3_18-24_102-defaultUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-vanilla-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-livepatch-5_3_18-150300_59_49-defaultUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_105-defaultUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azure | Feb 11, 2022 | Dec 15, 2021 |
| Ubuntu | — | Upgrade linux-azure-fdeUpgrade linux-gcp-fipsUpgrade linux-raspi2Upgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-gcpUpgrade linux-lts-xenialUpgrade linux-awsUpgrade linux-gkeop-5.4Upgrade linux-dell300xUpgrade linux-azure-4.15Upgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fde-5.15Upgrade linux-gkeUpgrade linuxUpgrade linux-gke-5.4Upgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-snapdragonUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-oem-5.10 | Nov 19, 2024 | Dec 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub