Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jfq-4vfx-p3rg

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.

EPSS

Процентиль: 20%
0.00063
Низкий

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 6 лет назад

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.

CVSS3: 2.5
redhat
больше 9 лет назад

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.

CVSS3: 7.8
nvd
больше 6 лет назад

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel.

CVSS3: 7.8
debian
больше 6 лет назад

In get_futex_key of futex.c, there is a use-after-free due to improper ...

oracle-oval
больше 2 лет назад

ELSA-2022-9852: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 20%
0.00063
Низкий

7.8 High

CVSS3

Дефекты

CWE-416