In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perf-debuginfo | Oct 14, 2022 | Aug 11, 2022 |
| Amazon_linux | — | Upgrade kernel | Dec 10, 2022 | Aug 11, 2022 |
| Debian | — | Upgrade linux | Dec 23, 2022 | Aug 11, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 3, 2022 | Aug 11, 2022 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-xen-baseUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-debug-baseUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-xen-develUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-traceUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-alUpgrade kernel-preemptUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-ec2-baseUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-preemptUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-vanilla-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-develUpgrade kernel-preempt-extraUpgrade kernel-vanilla-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-xenUpgrade kernel-source-rtUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-ec2-develUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dlm-kmp-preemptUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-trace-baseUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-trace-develUpgrade kernel-preempt-optionalUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade dtb-nvidiaUpgrade dlm-kmp-rt | Oct 26, 2022 | Aug 11, 2022 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-204-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-204-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1150-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-awsUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1127-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1114-oracleUpgrade linux-image-4.15.0-1135-kvmUpgrade linux-image-4.15.0-204-genericUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-4.15.0-1145-gcpUpgrade linux-image-4.15.0-1161-azureUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1145-snapdragonUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-gcp-lts-20.04 | Oct 11, 2022 | Aug 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub