CVE-2017-0749: High severity Google Android vulnerability
A elevation of privilege vulnerability in the Upstream Linux linux kernel. Product: Android. Versions: Android kernel. Android ID: A-36007735.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.249-1Fixed in 6.1.159-1Fixed in 6.1.162-1Fixed in 6.12.63-1Fixed in 6.12.73-1Fixed in 6.18.9-1Fixed in 6.18.12-1
Event History
Frequently Asked Questions
What access and interaction does exploitation require?
The CVSS vector indicates local attack access, no privileges required, and user interaction required. It is not described as remotely exploitable over the network.
What is the potential impact if exploitation succeeds?
The vulnerability is rated high severity with a CVSS 3.0 score of 7.8. The vector assigns high impact to confidentiality, integrity, and availability.
Which systems should be prioritized for review?
The description identifies the Android kernel as affected and lists Google Android and debian/linux as software. The supplied data does not identify specific Android releases, kernel versions, or Debian versions.