PT-2021-1505 · Google+2 · Android Kernel+2

Published 2021-08-21 · Updated 2023-08-08 · CVE-2021-39633

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Android kernel versions (affected versions not specified)

Description: The issue is related to the gre handle offloads function in the ip gre.c component of the Linux kernel, which can cause a page fault due to an invalid memory access. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not needed for exploitation. The issue allows an attacker to access confidential data.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-119

CWE-668

Related Identifiers

ASB-A-150694665

BDU:2022-05682

CVE-2021-39633

OESA-2022-1495

Affected Products

Android Kernel

Astra Linux

Linux Kernel

References · 21

• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1495 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-39633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4202 · Security Note
• https://source.android.com/security/bulletin/2022-01-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-39633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39633 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-39633 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-4197 · Security Note
• https://bdu.fstec.ru/vul/2022-05682 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-39633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4203 · Security Note
• https://ubuntu.com/security/CVE-2021-39633 · Vendor Advisory