Description
In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154175781References: Upstream kernel
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Android | Android kernel | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.18.6-1 | — |
| Debian 13 | linux | 4.18.6-1 | — |
| Debian 12 | linux | 4.18.6-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv +17 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-169.177 | — |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1121.129 | — |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1131.144 | — |
| Ubuntu 18.04 LTS | linux-dell300x | 4.15.0-1035.40 | — |
| Ubuntu 18.04 LTS | linux-gcp +11 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1116.130 | — |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1107.109 | — |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1087.95 | — |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1103.110 | — |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1120.129 | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2061.63 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2043.47 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1078.87 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2026.28 | — |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1120.128~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1131.144~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1116.130~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-169.177~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1087.95~16.04.1 | — |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1131.144~14.04.1 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | kernel-docs +5 | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
| SLES 15 | kernel-docs +6 | 4.12.14-150000.150.92.2 | SUSE-SU-2022:2103-1 |
| SLES 12 SP5 | kernel-azure | 4.12.14-16.100.2 | SUSE-SU-2022:2080-1 |
| SLES 12 SP5 | kernel-default +1 | 4.12.14-122.124.3 | SUSE-SU-2022:2116-1 |
| SLES 12 SP5 | kernel-docs +2 | 4.12.14-122.124.2 | SUSE-SU-2022:2116-1 |
| SLES 12 SP5 | kernel-syms-azure +1 | 4.12.14-16.100.1 | SUSE-SU-2022:2080-1 |
| SLES 12 SP4 | kernel-default | 4.12.14-95.99.3 | SUSE-SU-2022:2083-1 |
| SLES 12 SP4 | kernel-syms +1 | 4.12.14-95.99.2 | SUSE-SU-2022:2083-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP1 | kernel-docs +4 | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
| SLES for SAP 15 | kernel-docs +5 | 4.12.14-150000.150.92.2 | SUSE-SU-2022:2103-1 |
| SLES for SAP 12 SP5 | kernel-azure | 4.12.14-16.100.2 | SUSE-SU-2022:2080-1 |
| SLES for SAP 12 SP5 | kernel-default | 4.12.14-122.124.3 | SUSE-SU-2022:2116-1 |
| SLES for SAP 12 SP5 | kernel-syms +1 | 4.12.14-122.124.2 | SUSE-SU-2022:2116-1 |
| SLES for SAP 12 SP5 | kernel-syms-azure +1 | 4.12.14-16.100.1 | SUSE-SU-2022:2080-1 |
| SLES for SAP 12 SP4 | kernel-default | 4.12.14-95.99.3 | SUSE-SU-2022:2083-1 |
| SLES for SAP 12 SP4 | kernel-syms +1 | 4.12.14-95.99.2 | SUSE-SU-2022:2083-1 |
| SLE Real Time 12 SP5 | kernel-rt +3 | 4.12.14-10.94.1 | SUSE-SU-2022:2629-1 |
| SLE Live Patching 15 SP1 | kernel-default | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
| SLE Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_31 | 1-150100.3.3.2 | SUSE-SU-2022:2111-1 |
| SLE Live Patching 15 | kernel-default | 4.12.14-150000.150.92.2 | SUSE-SU-2022:2103-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_30 | 1-150000.1.3.2 | SUSE-SU-2022:2103-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.124.3 | SUSE-SU-2022:2116-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_32 | 1-8.3.3 | SUSE-SU-2022:2116-1 |
| SLE Live Patching 12 SP4 | kernel-default | 4.12.14-95.99.3 | SUSE-SU-2022:2083-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_27 | 1-6.3.3 | SUSE-SU-2022:2083-1 |
| SLE HPC 15 SP1 | kernel-docs +4 | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
| SLE HPC 15 | kernel-docs +5 | 4.12.14-150000.150.92.2 | SUSE-SU-2022:2103-1 |
| SUSE OpenStack Cloud Crowbar 9 | kernel-default | 4.12.14-95.99.3 | SUSE-SU-2022:2083-1 |
| SUSE OpenStack Cloud Crowbar 9 | kernel-syms +1 | 4.12.14-95.99.2 | SUSE-SU-2022:2083-1 |
| SUSE OpenStack Cloud 9 | kernel-default | 4.12.14-95.99.3 | SUSE-SU-2022:2083-1 |
| SUSE OpenStack Cloud 9 | kernel-syms +1 | 4.12.14-95.99.2 | SUSE-SU-2022:2083-1 |
| SUSE Enterprise Storage 6 | kernel-docs +4 | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | kernel-debug +4 | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
| openSUSE Leap 15.3 | kernel-debug +4 | 4.12.14-150100.197.114.2 | SUSE-SU-2022:2111-1 |
Advisories 7
- SUSE-SU-2022:2111-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2103-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2083-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2629-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2116-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2080-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-0112 Google Android: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jul 3, 2024