PUB-A-184622243

See a problem?
Import Source
https://storage.googleapis.com/android-osv-test/PUB-A-184622243.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-184622243
Aliases
Published
2021-10-01T00:00:00Z
Modified
2024-09-19T16:27:55.808472Z
Summary
Android Vomit Report
Details

In tipcnlretrieve_key of node.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Name
:linux_kernel:

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2021-10-05

Affected versions

Other

Kernel

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "244360639895632580909343709300829339969",
                    "242032057759838173138550976549810924410",
                    "317199474049074642163883053988954471417",
                    "41763571262795070774812886996638616093",
                    "231130384068037784494895237328334995090",
                    "36695028512439604191584538855034197930",
                    "310996492068062884972804771397695067944",
                    "257203694817447592363486787863648267766",
                    "4292105138964069920915579457942272750",
                    "298167501261298054191806569836995761532",
                    "8046602427858362906348346357479045798"
                ]
            },
            "id": "PUB-A-184622243-47421187",
            "source": "https://android.googlesource.com/kernel/common/+/0217ed2848e8538bcf9172d97ed2eeb4a26041bb",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "net/tipc/node.c"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 256.0,
                "function_hash": "189748262603555296906343239140324548668"
            },
            "id": "PUB-A-184622243-48f4e4a5",
            "source": "https://android.googlesource.com/kernel/common/+/0217ed2848e8538bcf9172d97ed2eeb4a26041bb",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "net/tipc/node.c",
                "function": "tipc_nl_retrieve_key"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/kernel/common/+/0217ed2848e8538bcf9172d97ed2eeb4a26041bb"
    ],
    "spl": "2021-10-05",
    "severity": "Moderate",
    "types": [
        "ID"
    ]
}