In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 10, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Aug 2, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf | Aug 18, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jul 11, 2022 | May 10, 2022 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-alUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-preemptUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-zteUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-caviumUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-preemptUpgrade dtb-renesasUpgrade kernel-syms-azureUpgrade kernel-vanilla-baseUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade kernel-default-develUpgrade cluster-md-kmp-preemptUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-preempt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-preemptUpgrade dtb-armUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-devel | Oct 26, 2022 | May 10, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-41-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1073-awsUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1023-awsUpgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-110-genericUpgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1078-azureUpgrade linux-image-5.13.0-1023-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04 | May 12, 2022 | May 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub