In tipcnlretrieve_key of node.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2021-10-05",
"severity": "Moderate",
"types": [
"ID"
],
"vanir_signatures": [
{
"id": "PUB-A-184622243-47421187",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"244360639895632580909343709300829339969",
"242032057759838173138550976549810924410",
"317199474049074642163883053988954471417",
"41763571262795070774812886996638616093",
"231130384068037784494895237328334995090",
"36695028512439604191584538855034197930",
"310996492068062884972804771397695067944",
"257203694817447592363486787863648267766",
"4292105138964069920915579457942272750",
"298167501261298054191806569836995761532",
"8046602427858362906348346357479045798"
],
"threshold": 0.9
},
"target": {
"file": "net/tipc/node.c"
},
"source": "https://android.googlesource.com/kernel/common/+/0217ed2848e8538bcf9172d97ed2eeb4a26041bb"
},
{
"id": "PUB-A-184622243-48f4e4a5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "189748262603555296906343239140324548668",
"length": 256.0
},
"target": {
"file": "net/tipc/node.c",
"function": "tipc_nl_retrieve_key"
},
"source": "https://android.googlesource.com/kernel/common/+/0217ed2848e8538bcf9172d97ed2eeb4a26041bb"
}
],
"fixes": [
"https://android.googlesource.com/kernel/common/+/0217ed2848e8538bcf9172d97ed2eeb4a26041bb"
]
}