Skip to content
OpenAdvisories
Unscored CVE-2021-0941 EUVD-2021-3560GHSA-c5v3-wvrc-wjc5

In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of …

Published Oct 25, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Description

In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel

Affected products

VendorProductAffectedFixed
— Android Android kernel —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.10.28-1 —
Debian 13 linux 5.10.28-1 —
Debian 12 linux 5.10.28-1 —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 20.04 LTS linux 5.4.0-74.83 —
Ubuntu 20.04 LTS linux-aws 5.4.0-1049.51 —
Ubuntu 20.04 LTS linux-azure 5.4.0-1048.50 —
Ubuntu 20.04 LTS linux-bluefield 5.4.0-1012.15 —
Ubuntu 20.04 LTS linux-gcp 5.4.0-1044.47 —
Ubuntu 20.04 LTS linux-gke 5.4.0-1044.46 —
Ubuntu 20.04 LTS linux-gkeop 5.4.0-1016.17 —
Ubuntu 20.04 LTS linux-hwe-5.8 5.8.0-55.62~20.04.1 —
Ubuntu 20.04 LTS linux-kvm 5.4.0-1040.41 —
Ubuntu 20.04 LTS linux-oem-5.10 5.10.0-1025.26 —
Ubuntu 20.04 LTS linux-oracle 5.4.0-1046.50 —
Ubuntu 20.04 LTS linux-raspi 5.4.0-1036.39 —
Ubuntu 20.04 LTS linux-riscv +6 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-144.148 —
Ubuntu 18.04 LTS linux-aws 4.15.0-1103.110 —
Ubuntu 18.04 LTS linux-aws-5.4 5.4.0-1049.51~18.04.1 —
Ubuntu 18.04 LTS linux-azure-4.15 4.15.0-1115.128 —
Ubuntu 18.04 LTS linux-azure-5.4 5.4.0-1048.50~18.04.1 —
Ubuntu 18.04 LTS linux-dell300x 4.15.0-1022.26 —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 18.04 LTS linux-gcp-4.15 4.15.0-1100.113 —
Ubuntu 18.04 LTS linux-gcp-5.4 5.4.0-1044.47~18.04.2 —
Ubuntu 18.04 LTS linux-gke-5.4 5.4.0-1044.46~18.04.1 —
Ubuntu 18.04 LTS linux-gkeop-5.4 5.4.0-1016.17~18.04.1 —
Ubuntu 18.04 LTS linux-hwe-5.4 5.4.0-74.83~18.04.1 —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1092.94 —
Ubuntu 18.04 LTS linux-oracle 4.15.0-1072.80 —
Ubuntu 18.04 LTS linux-oracle-5.4 5.4.0-1046.50~18.04.2 —
Ubuntu 18.04 LTS linux-raspi-5.4 5.4.0-1036.39~18.04.1 —
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1086.91 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1103.112 —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1069.73+fips2 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1073.76+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1067.71~20.04.1 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2045.47 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2027.30 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1060.68 —
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1103.110~16.04.1 —
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1115.128~16.04.1 —
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1100.113~16.04.1 —
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-144.148~16.04.1 —
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1072.80~16.04.1 —
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1115.128~14.04.1 —
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-372.9.1.rt7.166.el8 RHSA-2022:1975
RHEL 8 perf +26 4.18.0-372.9.1.el8 RHSA-2022:1988

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 perf +19 4.18.0-372.9.1.el8 ALSA-2022:1988

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 kernel 4.18.0-372.9.1.el8 RLSA-2022:1988
Rocky Linux 8 kernel-rt 4.18.0-372.9.1.rt7.166.el8 RLSA-2022:1975
ReleasePackageFixed inAdvisory
SLES 15 SP3 kernel-64kb +5 5.3.18-59.37.2 SUSE-SU-2021:3941-1
SLES 15 SP3 kernel-azure +2 5.3.18-38.31.1 SUSE-SU-2021:3806-1
SLES 15 SP3 kernel-default-base 5.3.18-59.37.2.18.23.3 SUSE-SU-2021:3941-1
SLES 15 SP3 kernel-obs-build 5.3.18-59.37.3 SUSE-SU-2021:3941-1
SLES 15 SP3 kernel-syms 5.3.18-59.37.1 SUSE-SU-2021:3941-1
SLES 15 SP2 kernel-azure +2 5.3.18-18.75.1 SUSE-SU-2021:3807-1
SLES 15 SP2 kernel-default-base 5.3.18-24.96.1.9.44.1 SUSE-SU-2021:3933-1
SLES 15 SP2 kernel-docs +5 5.3.18-24.96.1 SUSE-SU-2021:3933-1
SLES 15 SP1 kernel-docs +4 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLES 15 SP1 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
SLES 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLES 15 kernel-syms +4 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.80.1 SUSE-SU-2021:3848-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.103.1 SUSE-SU-2021:3877-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SLES for SAP 15 SP1 kernel-docs +3 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLES for SAP 15 SP1 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
SLES for SAP 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLES for SAP 15 kernel-syms +3 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.80.1 SUSE-SU-2021:3848-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.103.1 SUSE-SU-2021:3877-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.70.2 SUSE-SU-2021:3992-1
SLE Micro 5.1 kernel-default 5.3.18-59.37.2 SUSE-SU-2021:3941-1
SLE Micro 5.1 kernel-default-base 5.3.18-59.37.2.18.23.3 SUSE-SU-2021:3941-1
SLE Micro 5.1 kernel-rt 5.3.18-65.2 SUSE-SU-2021:3979-1
SLE Micro 5.0 kernel-default 5.3.18-24.96.1 SUSE-SU-2021:3933-1
SLE Micro 5.0 kernel-default-base 5.3.18-24.96.1.9.44.1 SUSE-SU-2021:3933-1
SLE Micro 5.0 kernel-rt 5.3.18-62.2 SUSE-SU-2021:3978-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-59.37.2 SUSE-SU-2021:3941-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_0 9-3.1 SUSE-SU-2021:4099-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_10 1-7.3.2 SUSE-SU-2021:3941-1
SLE Live Patching 15 SP2 kernel-default 5.3.18-24.96.1 SUSE-SU-2021:3933-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_10 13-2.2 SUSE-SU-2021:4090-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_11 12-2.2 SUSE-SU-2021:4090-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_15 7-2.1 SUSE-SU-2021:4090-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_22 1-5.3.1 SUSE-SU-2021:3933-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_8 +1 14-2.2 SUSE-SU-2021:4090-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_20 +1 14-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_22 13-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_23 12-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_24 9-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_25 8-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_26 6-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_27 1-3.3.1 SUSE-SU-2021:3876-1
SLE Live Patching 15 kernel-default 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_22 13-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_23 12-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_24 9-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_25 6-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_26 1-1.3.1 SUSE-SU-2021:3969-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.103.1 SUSE-SU-2021:3877-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_13 +1 14-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_15 13-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_16 12-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_17 10-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_18 9-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_19 +1 7-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_21 6-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_22 5-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_23 +1 3-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_25 2-2.1 SUSE-SU-2021:4021-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_26 1-8.5.1 SUSE-SU-2021:3877-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_18 13-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_19 12-2.2 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_20 9-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_21 8-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_22 6-2.1 SUSE-SU-2021:4038-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_23 1-6.3.1 SUSE-SU-2021:3972-1
SLE HPC 15 SP1 kernel-docs +3 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SLE HPC 15 SP1 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
SLE HPC 15 kernel-docs +1 4.12.14-150.78.2 SUSE-SU-2021:3969-1
SLE HPC 15 kernel-syms +3 4.12.14-150.78.1 SUSE-SU-2021:3969-1
SUSE Real Time Module 15 SP3 kernel-rt +2 5.3.18-65.2 SUSE-SU-2021:3979-1
SUSE Real Time Module 15 SP3 kernel-syms-rt 5.3.18-65.1 SUSE-SU-2021:3979-1
SUSE Real Time Module 15 SP2 kernel-rt 5.3.18-62.2 SUSE-SU-2021:3978-1
SUSE Real Time Module 15 SP2 kernel-rt_debug +1 5.3.18-62.3 SUSE-SU-2021:3978-1
SUSE Real Time Module 15 SP2 kernel-syms-rt 5.3.18-62.1 SUSE-SU-2021:3978-1
SUSE OpenStack Cloud Crowbar 9 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SUSE OpenStack Cloud 9 kernel-syms +2 4.12.14-95.83.2 SUSE-SU-2021:3972-1
SUSE Enterprise Storage 6 kernel-docs +3 4.12.14-197.102.2 SUSE-SU-2021:3876-1
SUSE Enterprise Storage 6 kernel-obs-build 4.12.14-197.102.1 SUSE-SU-2021:3876-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.3 dtb-aarch64 +2 5.3.18-59.37.1 openSUSE-SU-2021:3941-1
openSUSE Leap 15.3 kernel-64kb +3 5.3.18-59.37.2 openSUSE-SU-2021:3941-1
openSUSE Leap 15.3 kernel-azure +2 5.3.18-38.31.1 openSUSE-SU-2021:3806-1
openSUSE Leap 15.3 kernel-debug +4 4.12.14-197.102.2 openSUSE-SU-2021:3941-1, openSUSE-SU-2021:3876-1
openSUSE Leap 15.3 kernel-default-base 5.3.18-59.37.2.18.23.3 openSUSE-SU-2021:3941-1
openSUSE Leap 15.3 kernel-obs-build 5.3.18-59.37.3 openSUSE-SU-2021:3941-1
openSUSE Leap 15.2 kernel-default-base 5.3.18-lp152.106.1.lp152.8.52.1 openSUSE-SU-2021:1501-1
openSUSE Leap 15.2 kernel-docs +8 5.3.18-lp152.106.1 openSUSE-SU-2021:1501-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-372.9.1.el8 ELSA-2022-1988

Advisories 26

References