:linux_kernel: vulnerabilities (Android)
262 vulnerabilities.
:linux_kernel:AndroidIn rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer...4.6 Medium:linux_kernel:AndroidIn emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to...7.0 High:linux_kernel:AndroidIn binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use...7.8 High:linux_kernel:AndroidIn io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after...6.7 Medium:linux_kernel:Androidmm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an...7.0 High:linux_kernel:Androidmm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double...5.5 Medium:linux_kernel:AndroidAn issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video...6.1 Medium:linux_kernel:AndroidAn issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged...7.8 High:linux_kernel:AndroidIn the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due...5.5 Medium:linux_kernel:AndroidA race condition was found in the Linux kernel's watch queue due to a missing lock in...7.0 High:linux_kernel:AndroidIn (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This...6.7 Medium:linux_kernel:AndroidIn dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race...6.4 Medium:linux_kernel:AndroidIn v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper...6.7 Medium:linux_kernel:AndroidProduct: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel7.8 High:linux_kernel:AndroidIn bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a...6.7 Medium:linux_kernel:AndroidWhen sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory...6.7 Medium:linux_kernel:AndroidIn USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could...5.5 Medium:linux_kernel:Androidrpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4...5.5 Medium:linux_kernel:Androidrpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free.5.5 Medium:linux_kernel:AndroidA NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a...5.5 Medium:linux_kernel:AndroidIn various methods of kernel base drivers, there is a possible out of bounds write due to a heap...6.7 Medium:linux_kernel:AndroidIn lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This...6.4 Medium:linux_kernel:AndroidIn rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper...6.7 Medium:linux_kernel:AndroidIn TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to...6.4 Medium:linux_kernel:AndroidIn ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This...7.0 High:linux_kernel:AndroidIn lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of...4.6 Medium:linux_kernel:AndroidA use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets...7.8 High:linux_kernel:AndroidImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...7.8 High:linux_kernel:AndroidInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to...7.8 High:linux_kernel:AndroidThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...7.8 High:linux_kernel:AndroidThe root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease...7.8 High:linux_kernel:AndroidIn mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to...4.6 Medium:linux_kernel:AndroidIn various functions of the USB gadget subsystem, there is a possible out of bounds write due to...6.8 Medium:linux_kernel:AndroidIn the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in...7.0 High:linux_kernel:Androidusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a...5.5 Medium:linux_kernel:Androidems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a...7.8 High:linux_kernel:AndroidIn change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to...7.8 High:linux_kernel:AndroidIn ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This...7.8 High:linux_kernel:AndroidIn ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after...5.5 Medium:linux_kernel:AndroidIn dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free....7.8 High:linux_kernel:AndroidUse after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel8.6 High:linux_kernel:AndroidAn out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...7.8 High:linux_kernel:AndroidA flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of...7.8 High:linux_kernel:AndroidIn the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4...7.8 High:linux_kernel:AndroidA flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers...7.8 High:linux_kernel:AndroidAn issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...5.5 Medium:linux_kernel:AndroidIn ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow....7.8 High:linux_kernel:AndroidCertain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache...5.6 Medium:linux_kernel:AndroidImportant: kernel security, bug fix, and enhancement update7.8 High:linux_kernel:AndroidIn usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read...4.1 Medium- Show moreLoading…