Daxing Guo

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** The issue is related to a wi-fi driver vulnerability in the Android operating system, specifically concerning the Broadcom wi-fi driver. It involves insufficient access control, which can be exploited by a local attacker to elevate their privileges. **Recommendations** For Android kernel, apply the necessary patches or updates to fix the elevation of privilege vulnerability in the Broadcom wi-fi driver. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.10, Kernel-3.18 **Description** An information disclosure issue in the Broadcom Wi-Fi driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process first. The vulnerability is related to the lack of protection for service data, which could allow a remote attacker to violate data confidentiality using a local malicious application. **Recommendations** For Android versions Kernel-3.10, Kernel-3.18, consider restricting access to the Broadcom Wi-Fi driver until a patch is available. As a temporary workaround, consider disabling the Wi-Fi functionality in privileged processes to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2 through 7.1.1 **Description** The issue is related to insufficient access control in the libnl service of the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the Wi-Fi service using a local malicious application. This issue is rated as moderate because it requires compromising a privileged process and is mitigated by current platform configurations. **Recommendations** For Android versions 5.0.2 through 7.1.1, update to a version that includes the fix for this issue, specifically to a version that utilizes libnl 3.3.0 or later. As a temporary workaround, consider restricting access to the Wi-Fi service to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2 through 7.1 **Description** An elevation of privilege issue in the libnl library could allow a local malicious application to execute arbitrary code within the context of a privileged process, potentially gaining access to elevated capabilities. This issue is related to insufficient access control to certain functions. **Recommendations** For Android versions 5.0.2 through 7.1, update to a version that includes the fix for this issue, as specified by the Android ID A-32255299. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.7.5 **Description** The issue is related to a stack-based buffer overflow in the `brcmf cfg80211 start ap` function. This function is located in the `cfg80211.c` file within the Linux kernel. The overflow can occur when a local user sends a command to a Netlink socket with a long SSID Information Element. This can cause a denial of service, resulting in a system crash, or potentially have other unspecified impacts. **Recommendations** For Linux kernel versions prior to 4.7.5, update to version 4.7.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Netlink socket to minimize the risk of exploitation.