CVE-2017-13168: High severity Google Android vulnerability
Published Dec 6, 2017
·Updated
An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.
Affected Software
6 affected componentsFixes available
Google Android
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
debian/linux
6.1.176-16.1.187-16.12.107-16.12.111-17.2.9-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1
Event History
Dec 6, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:29 PM
Description
Jul 5, 2026
Data Sourced
via Ubuntu·11:15 AM
RemedyDescriptionSeverityAffected Software
Oct 10, 2026
Data Sourced
via Debian·12:56 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-13168?
CVE-2017-13168 is classified as an elevation of privilege vulnerability.
2
How do I fix CVE-2017-13168?
To fix CVE-2017-13168, update the kernel to the appropriate patched version as specified by your operating system vendor.
3
Which products are affected by CVE-2017-13168?
CVE-2017-13168 affects Android kernels and certain versions of Ubuntu Linux.
4
What versions of Ubuntu are vulnerable to CVE-2017-13168?
The vulnerable versions of Ubuntu are 12.04, 14.04, 16.04, and 18.04.
5
Is CVE-2017-13168 specific to certain Android devices?
CVE-2017-13168 affects all devices running vulnerable versions of the Android kernel.