In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2022 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-150000_150_92-defaultUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kgraft-patch-4_12_14-122_124-defaultUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-150100_197_114-defaultUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-vanillaUpgrade kernel-default-livepatchUpgrade kernel-debug-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-kgraftUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azureUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-kgraft-develUpgrade kernel-azure-develUpgrade kgraft-patch-4_12_14-95_99-defaultUpgrade dlm-kmp-default | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-snapdragonUpgrade linuxUpgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-dell300xUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-kvm | Nov 19, 2024 | Mar 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub