In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-64k-modules-coreUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-core | Sep 15, 2023 | May 15, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.165-143.735 | Jun 1, 2023 | May 15, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | May 15, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 15, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Dec 5, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | May 15, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-devel | Mar 5, 2024 | May 15, 2023 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade ocfs2-kmp-default | Jun 28, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-5.19.0-1025-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-genericUpgrade linux-image-5.19.0-42-genericUpgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k | May 17, 2023 | May 15, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub