Improper Privilege Management in Google Android - CVE-2020-0404

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU46929

Improper Privilege Management in Google Android - CVE-2020-0404

Published: September 17, 2020 / Updated: September 22, 2020


Vulnerability identifier: #VU46929
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-0404
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local authenticated user to execute arbitrary code.

In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel


Affected software

Google Android
Anolis OS
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Migration Toolkit for Containers
Red Hat Advanced Cluster Management for Kubernetes
Oracle VM Server for x86
kernel-tools
kernel-doc
kernel-abi-stablelists
python3-perf
perf
kernel-tools-libs
kernel-modules-extra
kernel-modules
kernel-headers
kernel-devel
kernel-debug-modules
bpftool
kernel
kernel-core
kernel-cross-headers
kernel-debug-modules-extra
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-tools-libs-devel
python-perf
kernel-modules-internal

How to mitigate CVE-2020-0404

Install update from vendor's website.

Migration Toolkit for Containers - addressed in versions 1.6.5, 1.7.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
kernel-tools - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-doc - update to 4.18.0-372.9.1
kernel-abi-stablelists - update to 4.18.0-372.9.1
python3-perf - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
perf - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-tools-libs - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-modules-extra - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-modules - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-headers - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-debug-modules - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
bpftool - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-core - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-debug-modules-extra - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-debug - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-debug-core - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel-debug-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-27.5, 4.19.91-28
kernel (Red Hat package) - update to 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - update to 4.18.0-372.9.1.rt7.166.el8
kernel-tools-libs-devel - addressed in versions 4.19.91-27.5, 4.19.91-28
python-perf - addressed in versions 4.19.91-27.5, 4.19.91-28
kernel-modules-internal - addressed in versions 4.19.91-27.5, 4.19.91-28

External References

Related Security Bulletins