In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | May 8, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-139-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.4.0-1093-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1103-azureUpgrade linux-image-5.4.0-1064-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1100-gcpUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1044-ibmUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-139-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1080-raspiUpgrade linux-image-5.4.0-1086-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1096-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1103-azure-fdeUpgrade linux-image-5.4.0-139-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04 | Mar 22, 2023 | Jan 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub