ASB-A-195082750

See a problem?
Import Source
https://storage.googleapis.com/android-osv-test/ASB-A-195082750.json
JSON Data
https://api.test.osv.dev/v1/vulns/ASB-A-195082750
Aliases
Published
2021-12-01T00:00:00Z
Modified
2024-09-19T16:28:03.364804Z
Summary
[none]
Details

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

References

Affected packages

Android / :linux_kernel:

Package

Name
:linux_kernel:

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2021-12-05

Affected versions

Other

Kernel

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/kernel/common/+/8cae8cd89f05f6de223d63e6d15e31c8ba9cf53b"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "id": "ASB-A-195082750-98f75c34",
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "fs/seq_file.c"
            },
            "digest": {
                "line_hashes": [
                    "74254866291374402956710747649521950744",
                    "80765060961419181796369186824257428641",
                    "30272898263732629582390626314069094611",
                    "249931424290703359451893110809274264261"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/kernel/common/+/8cae8cd89f05f6de223d63e6d15e31c8ba9cf53b"
        },
        {
            "id": "ASB-A-195082750-da83d170",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "function": "seq_buf_alloc",
                "file": "fs/seq_file.c"
            },
            "digest": {
                "function_hash": "33647813340154487149123856384192856444",
                "length": 101.0
            },
            "source": "https://android.googlesource.com/kernel/common/+/8cae8cd89f05f6de223d63e6d15e31c8ba9cf53b"
        }
    ],
    "spl": "2021-12-05"
}