PT-2020-7010 · Google+1 · Android Kernel+1
Published
2020-05-14
·
Updated
2021-12-06
·
CVE-2020-0110
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Android kernel versions (no specific range provided)
Description
The issue is related to the psi write function in the psi.c component of the Linux kernel, which is associated with a buffer overflow due to a missing bounds check. This could lead to a local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For the Linux kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Android kernel, apply the fix provided in the upstream kernel to resolve the issue.
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Kernel
Suse