In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210292376References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Apr 20, 2022 | Mar 16, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Apr 19, 2022 | Mar 16, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 24, 2022 | Dec 15, 2021 |
| Suse | — | Upgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dlm-kmp-preemptUpgrade dtb-allwinnerUpgrade reiserfs-kmp-preemptUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-preempt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-rockchipUpgrade kselftests-kmp-preemptUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-qcomUpgrade ocfs2-kmp-preemptUpgrade dtb-zteUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-livepatch-5_3_18-150300_59_49-defaultUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-alUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisilicon | Feb 11, 2022 | Feb 9, 2022 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-169-genericUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-virtualUpgrade linux-image-gke-5.4Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-5.4.0-1066-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1107-kvmUpgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-oemUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-genericUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-5.4.0-1070-azureUpgrade linux-image-4.15.0-1131-azureUpgrade linux-image-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-dell300x | Feb 9, 2022 | Feb 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub