Skip to content
OpenAdvisories
Unscored CVE-2021-0935 EUVD-2021-3554GHSA-3v3h-h6x7-96rv

In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privil…

Published Oct 25, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Package: linux Package: linux Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-azure Package: linux-azure-5.3 Package: linux-azure-edge Package: linux-fips Package: linux-gcp Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gcp-edge Package: linux-gke-4.15 Package: linux-hwe Package: linux-hwe-edge Package: linux-intel-iot-realtime Package: linux-kvm Package: linux-lts-xenial Package: linux-oem Package: linux-oem-5.6 Package: linux-oracle-5.0 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.8 Package: linux-snapdragon Package: linux-vmware Platform: Android Ecosystem: Debian Ecosystem: Ubuntu

Description

In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel

Affected products

VendorProductAffectedFixed
— Android Android kernel —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 linux 4.15.17-1 —
Debian 13 linux 4.15.17-1 —
Debian 12 linux 4.15.17-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 20.04 LTS linux-riscv +6 No fix yet —
Ubuntu 18.04 LTS linux-gcp +12 No fix yet —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1053.57 —
Ubuntu 16.04 LTS linux-azure 4.15.0-1013.13~16.04.2 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1014.14~16.04.1 —
Ubuntu 16.04 LTS linux-hwe 4.15.0-24.26~16.04.1 —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1073.79 —
Ubuntu Pro 16.04 LTS linux 4.4.0-223.256 USN-5361-1
Ubuntu Pro 16.04 LTS linux-aws 4.4.0-1139.153 USN-5361-1
Ubuntu Pro 16.04 LTS linux-kvm 4.4.0-1104.113 USN-5361-1
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1103.108 USN-5361-1
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-223.256~14.04.1 USN-5361-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-docs +5 4.12.14-197.105.1 SUSE-SU-2022:0366-1
SLES 15 kernel-docs +6 4.12.14-150.83.1 SUSE-SU-2022:0367-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.85.1 SUSE-SU-2022:0080-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.106.1 SUSE-SU-2022:0068-1
SLES 12 SP4 kernel-syms +2 4.12.14-95.88.1 SUSE-SU-2022:0371-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.153.1 SUSE-SU-2022:0362-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_36 14-2.2 SUSE-SU-2021:3751-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_37 12-2.2 SUSE-SU-2021:3751-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_38 11-2.2 SUSE-SU-2021:3751-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_39 8-2.2 SUSE-SU-2021:3751-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_40 5-2.2 SUSE-SU-2021:3751-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_41 2-2.1 SUSE-SU-2021:4052-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_42 1-4.3.1 SUSE-SU-2022:0362-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.164.1 SUSE-SU-2022:0477-1
SLES for SAP 15 SP1 kernel-docs +4 4.12.14-197.105.1 SUSE-SU-2022:0366-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.83.1 SUSE-SU-2022:0367-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.85.1 SUSE-SU-2022:0080-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.106.1 SUSE-SU-2022:0068-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.88.1 SUSE-SU-2022:0371-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.153.1 SUSE-SU-2022:0362-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_36 14-2.2 SUSE-SU-2021:3751-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_37 12-2.2 SUSE-SU-2021:3751-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_38 11-2.2 SUSE-SU-2021:3751-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_39 8-2.2 SUSE-SU-2021:3751-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_40 5-2.2 SUSE-SU-2021:3751-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_41 2-2.1 SUSE-SU-2021:4052-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_42 1-4.3.1 SUSE-SU-2022:0362-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.73.1 SUSE-SU-2022:0090-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.105.1 SUSE-SU-2022:0366-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_18 14-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_19 +2 13-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_22 12-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_23 11-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_24 8-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_25 7-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_26 5-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_27 2-2.1 SUSE-SU-2021:4039-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_28 1-3.3.1 SUSE-SU-2022:0366-1
SLE Live Patching 15 kernel-default 4.12.14-150.83.1 SUSE-SU-2022:0367-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_21 14-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_22 12-2.2 SUSE-SU-2021:3735-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_23 11-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_24 8-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_25 5-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_26 2-2.2 SUSE-SU-2022:0245-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_27 1-1.5.1 SUSE-SU-2022:0367-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.106.1 SUSE-SU-2022:0068-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_12 15-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_13 +1 13-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_15 12-2.2 SUSE-SU-2021:3735-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_16 11-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_17 9-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_18 8-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_19 +1 6-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_21 5-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_22 4-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_23 +1 2-2.2 SUSE-SU-2021:3692-1, SUSE-SU-2021:3684-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_25 +1 2-2.1 SUSE-SU-2021:4039-1, SUSE-SU-2021:4021-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_27 1-8.3.1 SUSE-SU-2022:0068-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.88.1 SUSE-SU-2022:0371-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_17 13-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_18 12-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_19 11-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_20 8-2.2 SUSE-SU-2021:3735-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_21 7-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_22 5-2.2 SUSE-SU-2021:3684-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_23 2-2.2 SUSE-SU-2022:0245-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_24 1-6.5.1 SUSE-SU-2022:0371-1
SLE HPC 15 SP1 kernel-docs +4 4.12.14-197.105.1 SUSE-SU-2022:0366-1
SLE HPC 15 kernel-docs +5 4.12.14-150.83.1 SUSE-SU-2022:0367-1
SUSE OpenStack Cloud Crowbar 9 kernel-syms +2 4.12.14-95.88.1 SUSE-SU-2022:0371-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.153.1 SUSE-SU-2022:0362-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_42 1-4.3.1 SUSE-SU-2022:0362-1
SUSE OpenStack Cloud 9 kernel-syms +2 4.12.14-95.88.1 SUSE-SU-2022:0371-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.153.1 SUSE-SU-2022:0362-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_42 1-4.3.1 SUSE-SU-2022:0362-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.153.1 SUSE-SU-2022:0362-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_42 1-4.3.1 SUSE-SU-2022:0362-1
SUSE Enterprise Storage 6 kernel-docs +4 4.12.14-197.105.1 SUSE-SU-2022:0366-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.3 kernel-debug +4 4.12.14-197.105.1 openSUSE-SU-2022:0366-1

Advisories 18

References