Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-0433

Опубликовано: 17 сент. 2020
Источник: debian

Описание

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed4.19.9-1package
linuxfixed4.9.228-1stretchpackage

Примечания

  • https://source.android.com/security/bulletin/pixel/2020-09-01

  • https://git.kernel.org/linus/f5bbbbe4d63577026f908a809f22f5fd5a90ea1f

  • https://git.kernel.org/linus/530ca2c9bd6949c72c9b5cfc330cb3dbccaa3f5b

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299

CVSS3: 7.8
nvd
больше 5 лет назад

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299

github
больше 3 лет назад

In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-151939299

suse-cvrf
больше 4 лет назад

Security update for the Linux Kernel (Live Patch 18 for SLE 15)

suse-cvrf
больше 4 лет назад

Security update for the Linux Kernel