In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 17, 2020 |
| Suse | — | Upgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kernel-symsUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-debug-baseUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-vanillaUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-docsUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-vanilla-develUpgrade kernel-default | Feb 7, 2021 | Sep 17, 2020 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-azureUpgrade linux-kvmUpgrade linux-oracleUpgrade linuxUpgrade linux-gcpUpgrade linux-oemUpgrade linux-raspi2Upgrade linux-awsUpgrade linux-hwe | Nov 19, 2024 | Sep 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub