Description
In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239842288References: Upstream kernel
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Android | Android kernel | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.16.18-1 | — |
| Debian 13 | linux | 5.16.18-1 | — |
| Debian 12 | linux | 5.16.18-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-37.39 | — |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1011.14 | — |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1010.12 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1008.12 | — |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1008.10 | — |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1007.8 | — |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1008.11 | — |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1010.11 | — |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1009.12 | — |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1011.13 | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv | 5.15.0-1012.13 | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-117.132 | — |
| Ubuntu 20.04 LTS | linux-aws +1 | 5.4.0-1078.84 | — |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1083.87 | — |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1008.9~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-gke | 5.4.0-1074.79 | — |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1046.48 | — |
| Ubuntu 20.04 LTS | linux-hwe-5.15 | 5.15.0-41.44~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1026.29 | — |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1068.72 | — |
| Ubuntu 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-42.45~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1033.36 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1076.83 | — |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1065.75 | — |
| Ubuntu 20.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-184.194 | — |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1133.143 | — |
| Ubuntu 18.04 LTS | linux-aws-5.4 +1 | 5.4.0-1078.84~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1142.156 | — |
| Ubuntu 18.04 LTS | linux-azure-5.4 | 5.4.0-1083.87~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-dell300x | 4.15.0-1047.52 | — |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1127.142 | — |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-117.132~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-ibm-5.4 | 5.4.0-1028.32~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1119.123 | — |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1098.108 | — |
| Ubuntu 18.04 LTS | linux-oracle-5.4 | 5.4.0-1076.83~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-raspi-5.4 | 5.4.0-1065.75~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1114.122 | — |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1132.142 | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1014.14 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips +1 | 5.4.0-1078.84+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1083.87+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1054.61 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2072.76 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2053.58 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1090.100 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2037.41 | — |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1133.143~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1142.156~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1127.142~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-184.194~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1098.108~16.04.1 | — |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1142.156~14.04.1 | — |
Advisories 3
- ICSA-24-074-07 Siemens SIMATIC CISA ICS & IT advisories · Mar 14, 2024
- SSA-770721 SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 Siemens ProductCERT · Mar 12, 2024
- WID-SEC-2022-1599 Android Patchday October 2022 BSI CERT-Bund (WID) · Feb 15, 2023