In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150694665References: Upstream kernel
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2022-01-01 | Patch Vendor Advisory |
Configurations
Information
Published : 2022-01-14 12:15
Updated : 2022-01-19 14:02
NVD link : CVE-2021-39633
Mitre link : CVE-2021-39633
JSON object : View
CWE
CWE-668
Exposure of Resource to Wrong Sphere
Products Affected
- android