In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | May 8, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-139-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1086-kvmUpgrade linux-image-genericUpgrade linux-image-gke-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.4.0-139-generic-lpaeUpgrade linux-image-5.4.0-1103-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1080-raspiUpgrade linux-image-5.4.0-1096-awsUpgrade linux-image-5.4.0-1064-gkeopUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1044-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1100-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-139-genericUpgrade linux-image-5.4.0-1103-azureUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.4.0-1093-oracleUpgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-20.04 | Mar 22, 2023 | Jan 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub