:linux_kernel: vulnerabilities (Android)
262 vulnerabilities.
:linux_kernel:Androidtls: make sure to abort the stream if headers are bogus9.8 Critical:linux_kernel:Androidtls: fix handling of zero-length records on the rx_list9.8 Critical:linux_kernel:Androidf2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic7.8 High:linux_kernel:Androidvsock: Do not allow binding to VMADDR_PORT_ANY7.8 High:linux_kernel:Androidtls: handle data disappearing from under the TLS ULP7.8 High:linux_kernel:Androidxfrm: interface: fix use-after-free after changing collect_md xfrm interface7.8 High:linux_kernel:Androidposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()7.8 High:linux_kernel:Androideventpoll: don't decrement ep refcount while still holding the ep mutex7.8 High:linux_kernel:Androidaf_unix: Don't leave consecutive consumed OOB skbs.7.8 High:linux_kernel:AndroidIn multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic...4.0 Medium:linux_kernel:Androidvsock: Keep the binding until socket destruction7.8 High:linux_kernel:Androidnet: avoid race between device unregistration and ethnl ops7.8 High:linux_kernel:AndroidIn multiple functions of mremap.c, there is a possible use-after-free scenario in physical memory due to a race condition. This could lead to local escalation of privilege with no additional execution…No score:linux_kernel:Androidbinder: fix node UAF in binder_add_freeze_work()7.8 High:linux_kernel:AndroidALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices7.8 High:linux_kernel:AndroidALSA: usb-audio: Fix out of bounds reads when finding clock sources7.1 High:linux_kernel:Androidmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format7.8 High:linux_kernel:AndroidHID: core: zero-initialize the report buffer5.5 Medium:linux_kernel:Androidvsock/virtio: Initialization of the dangling pointer occurring in vsk->trans7.8 High:linux_kernel:Androiddma-buf: heaps: Fix off-by-one in CMA heap fault handler7.8 High:linux_kernel:Androidbinder: fix UAF caused by offsets overwrite7.8 High:linux_kernel:Androidf2fs: fix to truncate preallocated blocks in f2fs_file_open()5.5 Medium:linux_kernel:Androidnet: sched: sch_multiq: fix possible OOB write in multiq_tune()7.8 High:linux_kernel:Androidaf_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.7.8 High:linux_kernel:Androidnet: fix __dst_negative_advice() race7.8 High:linux_kernel:Androidaf_unix: Clear stale u->oob_skb.6.3 Medium:linux_kernel:Androidbinder: check offset alignment in binder_get_object()7.8 High:linux_kernel:Androidaf_unix: Fix garbage collector racing against connect()7.8 High:linux_kernel:AndroidUse-after-free in Linux kernel's af_unix component7.8 High:linux_kernel:AndroidIn multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due...6.7 Medium:linux_kernel:AndroidIn incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free...6.7 Medium:linux_kernel:AndroidIn multiple functions of binder.c, there is a possible memory corruption due to a use after free....7.8 High:linux_kernel:AndroidIn adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free....7.8 High:linux_kernel:AndroidIn __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack...7.8 High:linux_kernel:AndroidIn acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a...6.6 Medium:linux_kernel:AndroidThe Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff...4.6 Medium:linux_kernel:AndroidIn binder_transaction_buffer_release of binder.c, there is a possible use after free due to...7.8 High:linux_kernel:AndroidIn several functions of the Android Linux kernel, there is a possible way to corrupt memory due...7.8 High:linux_kernel:AndroidUse after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel7.9 High:linux_kernel:AndroidThere exists a use-after-free vulnerability in the Linux kernel through io_uring and the...7.8 High:linux_kernel:AndroidIn binder_vma_close of binder.c, there is a possible use after free due to improper locking. This...7.8 High:linux_kernel:AndroidIn verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to...6.7 Medium:linux_kernel:AndroidIn extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due...6.7 Medium:linux_kernel:AndroidIn (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This...7.8 High:linux_kernel:AndroidIn pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition....6.4 Medium:linux_kernel:AndroidIn l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This...7.8 High:linux_kernel:AndroidA list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19...5.5 Medium:linux_kernel:AndroidVarious refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1...7.8 High:linux_kernel:AndroidA use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2...8.8 High:linux_kernel:AndroidAn issue was discovered in the Linux kernel through 5.19.11. Attackers able to inject WLAN frames...8.1 High- Show moreLoading…