In addr_match of xfrm.h, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "Moderate",
"spl": "2021-06-05",
"types": [
"ID"
],
"fixes": [
"http://android.googlesource.com/kernel/common/+/b59a23d596807a5aa88d8dd5655a66c6843729b3"
],
"vanir_signatures": [
{
"signature_type": "Line",
"target": {
"file": "net/key/af_key.c"
},
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"12193446288571942057135608200392438833",
"137073672524336082138202951569919425626",
"141661769773401445728171340982954635025"
],
"threshold": 0.9
},
"source": "http://android.googlesource.com/kernel/common/+/b59a23d596807a5aa88d8dd5655a66c6843729b3",
"id": "PUB-A-110373476-3914a5bc"
},
{
"signature_type": "Function",
"target": {
"function": "pfkey_dump",
"file": "net/key/af_key.c"
},
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1242.0,
"function_hash": "9210386365306330411516133361957322630"
},
"source": "http://android.googlesource.com/kernel/common/+/b59a23d596807a5aa88d8dd5655a66c6843729b3",
"id": "PUB-A-110373476-99e09f70"
}
]
}