CVE-2017-13168

Description

An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	4.17.6-1	—
Debian 13	linux	4.17.6-1	—
Debian 12	linux	4.17.6-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 24.04 LTS	linux-gcp-6.11 +4	No fix yet	—
Ubuntu 22.04 LTS	linux-riscv +2	No fix yet	—
Ubuntu 20.04 LTS	linux-gke +3	No fix yet	—
Ubuntu 18.04 LTS	linux	4.15.0-39.42	USN-3820-1
Ubuntu 18.04 LTS	linux-aws	4.15.0-1027.27	USN-3820-1
Ubuntu 18.04 LTS	linux-azure	4.15.0-1031.32	USN-3820-1
Ubuntu 18.04 LTS	linux-gcp	4.15.0-1024.25	USN-3820-1
Ubuntu 18.04 LTS	linux-kvm	4.15.0-1026.26	USN-3820-1
Ubuntu 18.04 LTS	linux-oem	4.15.0-1026.31	USN-3820-1
Ubuntu 18.04 LTS	linux-raspi2	4.15.0-1028.30	USN-3820-1
Ubuntu 16.04 LTS	linux	4.4.0-134.160	USN-3753-1
Ubuntu 16.04 LTS	linux-aws	4.4.0-1066.76	USN-3753-1
Ubuntu 16.04 LTS	linux-azure	4.15.0-1031.32~16.04.1	USN-3820-2
Ubuntu 16.04 LTS	linux-gcp	4.15.0-1024.25~16.04.2	USN-3820-2
Ubuntu 16.04 LTS	linux-hwe	4.15.0-39.42~16.04.1	USN-3820-2
Ubuntu 16.04 LTS	linux-kvm	4.4.0-1032.38	USN-3753-1
Ubuntu 16.04 LTS	linux-raspi2	4.4.0-1095.103	USN-3753-1
Ubuntu 16.04 LTS	linux-snapdragon	4.4.0-1099.104	USN-3753-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 14.04 LTS	linux	3.13.0-162.212	USN-3822-1
Ubuntu 14.04 LTS	linux-aws	4.4.0-1028.31	USN-3753-2
Ubuntu 14.04 LTS	linux-azure	4.15.0-1031.32~14.04.1	USN-3820-3
Ubuntu 14.04 LTS	linux-lts-xenial	4.4.0-134.160~14.04.1	USN-3753-2
Ubuntu Pro FIPS-updates 16.04 LTS	linux-fips	4.4.0-1008.10	—
Ubuntu Pro 20.04 LTS	linux-azure-fde-5.15	No fix yet	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 7	dtrace-modules-3.8.13-118.28.1.el6uek +1	0.4.5-3.el6	ELSA-2019-4316, ELSA-2018-4300
Oracle Linux 7	dtrace-modules-3.8.13-118.28.1.el7uek +1	0.4.5-3.el7	ELSA-2019-4316, ELSA-2018-4300
Oracle Linux 7	kernel-uek +5	3.8.13-118.28.1.el7uek	ELSA-2019-4316, ELSA-2018-4300, ELSA-2018-4270
Oracle Linux 7	perf +5	4.14.35-1818.4.5.el7uek	ELSA-2018-4270

Advisories 10

USN-3822-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
USN-3820-1 linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
USN-3753-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
USN-3820-2 linux-hwe, linux-azure, linux-gcp vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
USN-3820-3 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
USN-3753-2 linux-lts-xenial, linux-aws vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
ELSA-2019-4316 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 4, 2019
ELSA-2018-4300 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 6, 2018
ELSA-2018-4270 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 8, 2018
ELSA-2018-4265 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 6, 2018

References

USN-3753-2 vendor-advisory
USN-3820-1 vendor-advisory
USN-3820-2 vendor-advisory
https://source.android.com/security/bulletin/pixel/2017-12-01
USN-3822-2 vendor-advisory
USN-3753-1 vendor-advisory
USN-3822-1 vendor-advisory
USN-3820-3 vendor-advisory