CVE-2020-0431: Medium severity android vulnerability
A flaw out of bounds write in the Linux kernel human interface devices subsystem was found in the way user calls find key code by index. A local user could use this flaw to crash the system or escalate privileges on the system.
Other sources
In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459
References: https://android.googlesource.com/kernel/common/+/cb0a3edf8d00 https://source.android.com/security/bulletin/pixel/2020-09-01
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-0431?
CVE-2020-0431 is considered a high severity vulnerability that could lead to system crashes or privilege escalation.
How do I fix CVE-2020-0431?
To address CVE-2020-0431, ensure that your system is updated to kernel version 4.18.0-305.rt7.72.el8 or 4.18.0-305.el8.
Who is affected by CVE-2020-0431?
CVE-2020-0431 affects systems running specific versions of the Linux kernel, including those from Red Hat and openSUSE.
What kind of systems are vulnerable to CVE-2020-0431?
Vulnerable systems include certain versions of the Linux kernel used in Red Hat, openSUSE, and Google Android.
Can CVE-2020-0431 be exploited remotely?
CVE-2020-0431 requires local access to the system for exploitation, making it less likely to be exploited remotely.