In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 10, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Aug 2, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libs | Aug 18, 2022 | May 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 11, 2022 | May 10, 2022 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade dlm-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-preempt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-syms-azureUpgrade kernel-preempt-develUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-preemptUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-alUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-kvmsmall-baseUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-zteUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-rtUpgrade dtb-rockchip | Oct 26, 2022 | May 10, 2022 |
| Ubuntu | — | Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-1026-raspi-nolpaeUpgrade linux-image-5.4.0-1040-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.13.0-41-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1078-azureUpgrade linux-image-5.4.0-110-generic-lpaeUpgrade linux-image-5.13.0-1022-kvmUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.13.0-1023-azureUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.13.0-1026-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1078-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.13.0-1028-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1071-gkeUpgrade linux-image-5.4.0-110-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1025-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1063-kvmUpgrade linux-image-azureUpgrade linux-image-5.13.0-41-genericUpgrade linux-image-5.4.0-1021-ibmUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1023-awsUpgrade linux-image-5.13.0-41-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1071-oracleUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-110-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1060-raspiUpgrade linux-image-5.4.0-1073-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-41-lowlatencyUpgrade linux-image-5.4.0-1073-aws | May 12, 2022 | May 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub