PT-2020-11615 · Google · Android Kernel

Published 2020-08-13 · Updated 2021-07-21 · CVE-2020-0261

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a possible bypass of seccomp due to a missing configuration file in C2 flame devices. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android kernel, consider implementing a configuration file to prevent the bypass of seccomp as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2020-0261

Affected Products

Android Kernel

References · 3

• https://source.android.com/security/bulletin/pixel/2020-08-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0261 · Security Note
• https://t.me/cibsecurity/14123 · Telegram Post