Skip to content
OpenAdvisories

Description

In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
— Android Android kernel —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.19.37-1 —
Debian 13 linux 4.19.37-1 —
Debian 12 linux 4.19.37-1 —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +2 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-60.67 —
Ubuntu 18.04 LTS linux-aws 4.15.0-1047.49 —
Ubuntu 18.04 LTS linux-gcp +5 No fix yet —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1041.43 —
Ubuntu 18.04 LTS linux-hwe 5.0.0-23.24~18.04.1 —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1043.43 —
Ubuntu 18.04 LTS linux-oem 4.15.0-1056.65 —
Ubuntu 18.04 LTS linux-oracle 4.15.0-1022.25 —
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1044.47 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1062.69 —
Ubuntu 16.04 LTS linux 4.4.0-148.174 —
Ubuntu 16.04 LTS linux-aws 4.4.0-1083.93 —
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1047.49~16.04.1 —
Ubuntu 16.04 LTS linux-azure 4.15.0-1056.61 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1041.43 —
Ubuntu 16.04 LTS linux-hwe 4.15.0-60.67~16.04.1 —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1046.52 —
Ubuntu 16.04 LTS linux-oracle 4.15.0-1022.25~16.04.1 —
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1107.115 —
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1111.116 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS linux-aws 4.4.0-1044.47 —
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-148.174~14.04.1 —
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1059.64~14.04.1 —
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-240.rt7.54.el8 RHSA-2020:4609
RHEL 8 perf +26 4.18.0-240.el8 RHSA-2020:4431

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 kernel-tools-libs-devel 4.18.0-240.el8 ALSA-2020:4431
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.33.1 SUSE-SU-2020:1604-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.45.1 SUSE-SU-2020:1599-1
SLES 15 kernel-docs +6 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.16.1 SUSE-SU-2020:1587-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.23.1 SUSE-SU-2020:1602-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.43.1 SUSE-SU-2020:1603-1
SLES 12 SP4 kernel-docs +4 4.12.14-95.54.1 SUSE-SU-2020:1605-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.16.1 SUSE-SU-2020:1587-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.23.1 SUSE-SU-2020:1602-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.43.1 SUSE-SU-2020:1603-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.54.1 SUSE-SU-2020:1605-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.13.1 SUSE-SU-2020:2478-1
SLE Real Time 12 SP4 kernel-rt +3 4.12.14-8.23.1 SUSE-SU-2020:2156-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.45.1 SUSE-SU-2020:1599-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_12 1-3.5.1 SUSE-SU-2020:1599-1
SLE Live Patching 15 kernel-default 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_18 1-1.5.1 SUSE-SU-2020:1663-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.23.1 SUSE-SU-2020:1602-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_5 1-8.3.1 SUSE-SU-2020:1602-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.54.1 SUSE-SU-2020:1605-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_14 1-6.3.1 SUSE-SU-2020:1605-1
SLE HPC 15 kernel-docs +5 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SUSE Real Time Module 15 SP1 kernel-rt +3 4.12.14-14.28.1 SUSE-SU-2020:2487-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.1 kernel-docs 4.12.14-lp151.28.52.2 openSUSE-SU-2020:0801-1
openSUSE Leap 15.1 kernel-obs-qa +1 4.12.14-lp151.28.52.3 openSUSE-SU-2020:0801-1
openSUSE Leap 15.1 kernel-syms +5 4.12.14-lp151.28.52.1 openSUSE-SU-2020:0801-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-240.el8 ELSA-2020-4431

Advisories 17

References