In multiqtune of schmultiq.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/kernel/common/+/841cae881066f0dd38d15a90cfcf245b0db9fc73",
"https://android.googlesource.com/kernel/common/+/89bc0b3e94aca316922ea2c1fa95efb7b935a9dd"
],
"spl": "2024-11-05",
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"116836023247365727830807583073258796829",
"293186181438904796417585315409241229877",
"193681609402722915796820278242998607810",
"268184959904940014411019765210601625268"
],
"threshold": 0.9
},
"id": "ASB-A-349777785-fbe94967",
"source": "https://android.googlesource.com/kernel/common/+/841cae881066f0dd38d15a90cfcf245b0db9fc73",
"signature_type": "Line",
"target": {
"file": "net/sched/sch_multiq.c"
}
}
],
"severity": "High"
}