In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1036-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-azureUpgrade linux-image-azure-cvmUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.15.0-1038-azureUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-intelUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp | Mar 22, 2023 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub