PUB-A-110373476

See a problem?
Import Source
https://storage.googleapis.com/android-osv/PUB-A-110373476.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-110373476
Aliases
Published
2021-06-01T00:00:00Z
Modified
2024-08-29T07:12:50.024093Z
Summary
[slab-out-of-bounds in kernel xfrm module function xfrm_state_walk]
Details

In addr_match of xfrm.h, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2021-06-05

Affected versions

Other

Kernel

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "12193446288571942057135608200392438833",
                    "137073672524336082138202951569919425626",
                    "141661769773401445728171340982954635025"
                ]
            },
            "id": "PUB-A-110373476-3914a5bc",
            "source": "http://android.googlesource.com/kernel/common/+/b59a23d596807a5aa88d8dd5655a66c6843729b3",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "net/key/af_key.c"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1242.0,
                "function_hash": "9210386365306330411516133361957322630"
            },
            "id": "PUB-A-110373476-99e09f70",
            "source": "http://android.googlesource.com/kernel/common/+/b59a23d596807a5aa88d8dd5655a66c6843729b3",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "net/key/af_key.c",
                "function": "pfkey_dump"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "http://android.googlesource.com/kernel/common/+/b59a23d596807a5aa88d8dd5655a66c6843729b3"
    ],
    "spl": "2021-06-05",
    "severity": "Moderate",
    "types": [
        "ID"
    ]
}