In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | May 8, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1096-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-139-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1080-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-139-generic-lpaeUpgrade linux-image-5.4.0-1103-azure-fdeUpgrade linux-image-5.4.0-1086-kvmUpgrade linux-image-5.4.0-1100-gcpUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1064-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-139-genericUpgrade linux-image-5.4.0-1103-azureUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1093-oracleUpgrade linux-image-5.4.0-1044-ibmUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-raspi | Mar 22, 2023 | Jan 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub