In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2022 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-default-kgraft-develUpgrade kgraft-patch-4_12_14-95_99-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-vanilla-baseUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-kgraftUpgrade kernel-vanilla-develUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-livepatch-4_12_14-150000_150_92-defaultUpgrade kernel-develUpgrade kernel-debug-baseUpgrade kernel-macrosUpgrade kgraft-patch-4_12_14-122_124-defaultUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-4_12_14-150100_197_114-default | Oct 26, 2022 | Mar 16, 2022 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linuxUpgrade linux-snapdragonUpgrade linux-azure-4.15Upgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-raspi2Upgrade linux-dell300xUpgrade linux-gcp-fipsUpgrade linux-oracle | Nov 19, 2024 | Mar 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub