Use-after-free in Google Android - CVE-2020-0429

Vulnerability identifier: #VU47047

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0429

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local privileged user to execute arbitrary code.

In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806

Google Android
SUSE CaaS Platform
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Real Time Extension
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise High Performance Computing
kernel-livepatch-4_12_14-197_102-default
kgraft-patch-4_4_180-94_150-default
kgraft-patch-4_4_180-94_150-default-debuginfo
kgraft-patch-4_12_14-95_83-default
kgraft-patch-4_12_14-122_83-default
kgraft-patch-4_4_180-94_144-default
kgraft-patch-4_4_180-94_144-default-debuginfo
kgraft-patch-4_4_180-94_147-default
kgraft-patch-4_4_180-94_147-default-debuginfo
kgraft-patch-4_4_180-94_141-default-debuginfo
kgraft-patch-4_4_180-94_141-default
kgraft-patch-4_4_180-94_138-default-debuginfo
kgraft-patch-4_4_180-94_138-default
kgraft-patch-4_4_121-92_149-default
kernel-devel
kernel-syms
kernel-default-devel
kernel-default-debugsource
kernel-default-debuginfo
kernel-default-base-debuginfo
kernel-default-base
kernel-default
kernel-source
kernel-macros
ocfs2-kmp-default-debuginfo
ocfs2-kmp-default
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
cluster-md-kmp-default-debuginfo
kernel-default-kgraft
cluster-md-kmp-default
kernel-default-man
cluster-md-kmp-rt-debuginfo
kernel-devel-rt
cluster-md-kmp-rt
kernel-source-rt
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-syms-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt_debug
kernel-rt-devel-debuginfo
kernel-rt-devel
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-rt-base-debuginfo
kernel-rt-base
kernel-rt
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
dlm-kmp-rt
kernel-azure-base-debuginfo
kernel-devel-azure
kernel-source-azure
kernel-azure
kernel-azure-base
kernel-azure-debuginfo
kernel-azure-debugsource
kernel-azure-devel
kernel-syms-azure
kernel-default-kgraft-devel
kernel-default-devel-debuginfo
kernel-docs
kernel-obs-build-debugsource
kernel-obs-build
kernel-default-extra-debuginfo
kernel-default-extra
kernel-default-livepatch-devel
kernel-default-livepatch
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default

Install update from vendor's website.

kernel-livepatch-4_12_14-197_102-default - update to 1-3.3.1
kgraft-patch-4_4_180-94_150-default - update to 1-4.3.1
kgraft-patch-4_4_180-94_150-default-debuginfo - update to 1-4.3.1
kgraft-patch-4_12_14-95_83-default - update to 1-6.3.1
kgraft-patch-4_12_14-122_83-default - update to 1-8.3.1
kgraft-patch-4_4_180-94_144-default - update to 2-2.1
kgraft-patch-4_4_180-94_144-default-debuginfo - update to 2-2.1
kgraft-patch-4_4_180-94_147-default - update to 2-2.1
kgraft-patch-4_4_180-94_147-default-debuginfo - update to 2-2.1
kgraft-patch-4_4_180-94_141-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_180-94_141-default - update to 2-2.2
kgraft-patch-4_4_180-94_138-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_180-94_138-default - update to 2-2.2
kgraft-patch-4_4_121-92_149-default - update to 2-2.2
kernel-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-syms - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-debugsource - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-base - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-source - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-macros - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
ocfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
ocfs2-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
gfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
gfs2-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
dlm-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
dlm-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
cluster-md-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-kgraft - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1
cluster-md-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-default-man - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
cluster-md-kmp-rt-debuginfo - update to 4.12.14-10.54.1
kernel-devel-rt - update to 4.12.14-10.54.1
cluster-md-kmp-rt - update to 4.12.14-10.54.1
kernel-source-rt - update to 4.12.14-10.54.1
ocfs2-kmp-rt-debuginfo - update to 4.12.14-10.54.1
ocfs2-kmp-rt - update to 4.12.14-10.54.1
kernel-syms-rt - update to 4.12.14-10.54.1
kernel-rt_debug-devel-debuginfo - update to 4.12.14-10.54.1
kernel-rt_debug-devel - update to 4.12.14-10.54.1
kernel-rt_debug-debugsource - update to 4.12.14-10.54.1
kernel-rt_debug-debuginfo - update to 4.12.14-10.54.1
kernel-rt_debug - update to 4.12.14-10.54.1
kernel-rt-devel-debuginfo - update to 4.12.14-10.54.1
kernel-rt-devel - update to 4.12.14-10.54.1
kernel-rt-debugsource - update to 4.12.14-10.54.1
kernel-rt-debuginfo - update to 4.12.14-10.54.1
kernel-rt-base-debuginfo - update to 4.12.14-10.54.1
kernel-rt-base - update to 4.12.14-10.54.1
kernel-rt - update to 4.12.14-10.54.1
gfs2-kmp-rt-debuginfo - update to 4.12.14-10.54.1
gfs2-kmp-rt - update to 4.12.14-10.54.1
dlm-kmp-rt-debuginfo - update to 4.12.14-10.54.1
dlm-kmp-rt - update to 4.12.14-10.54.1
kernel-azure-base-debuginfo - update to 4.12.14-16.68.1
kernel-devel-azure - update to 4.12.14-16.68.1
kernel-source-azure - update to 4.12.14-16.68.1
kernel-azure - update to 4.12.14-16.68.1
kernel-azure-base - update to 4.12.14-16.68.1
kernel-azure-debuginfo - update to 4.12.14-16.68.1
kernel-azure-debugsource - update to 4.12.14-16.68.1
kernel-azure-devel - update to 4.12.14-16.68.1
kernel-syms-azure - update to 4.12.14-16.68.1
kernel-default-kgraft-devel - addressed in versions 4.12.14-95.83.2, 4.12.14-122.83.1
kernel-default-devel-debuginfo - addressed in versions 4.12.14-95.83.2, 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-docs - addressed in versions 4.12.14-122.83.1, 4.12.14-197.102.2
kernel-obs-build-debugsource - addressed in versions 4.12.14-122.83.1, 4.12.14-197.102.1
kernel-obs-build - addressed in versions 4.12.14-122.83.1, 4.12.14-197.102.1
kernel-default-extra-debuginfo - update to 4.12.14-122.83.1
kernel-default-extra - update to 4.12.14-122.83.1
kernel-default-livepatch-devel - update to 4.12.14-197.102.2
kernel-default-livepatch - update to 4.12.14-197.102.2
kernel-zfcpdump-debugsource - update to 4.12.14-197.102.2
kernel-zfcpdump-debuginfo - update to 4.12.14-197.102.2
reiserfs-kmp-default-debuginfo - update to 4.12.14-197.102.2
reiserfs-kmp-default - update to 4.12.14-197.102.2

• https://source.android.com/security/bulletin/pixel/2020-09-01

• SUSE Linux Enterprise Server update for kernel
• SUSE update for the Linux Kernel (Live Patch 38 for SLE 12 SP3)
• SUSE update for the Linux Kernel (Live Patch 39 for SLE 12 SP3)
• SUSE update for the Linux Kernel (Live Patch 40 for SLE 12 SP3)
• SUSE update for the Linux Kernel (Live Patch 39 for SLE 12 SP2)
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel