In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2022 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-default-kgraftUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-debug-baseUpgrade kernel-vanillaUpgrade kernel-macrosUpgrade kgraft-patch-4_12_14-122_124-defaultUpgrade kernel-source-azureUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-4_12_14-150000_150_92-defaultUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-150100_197_114-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-kgraft-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-default-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade kgraft-patch-4_12_14-95_99-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-docs | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-dell300xUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-raspi2Upgrade linux-snapdragonUpgrade linux-hweUpgrade linux-awsUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-azure-fipsUpgrade linux | Nov 19, 2024 | Mar 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub