CVE-2025-0088: Buffer Overflow
Published Feb 1, 2025
·Updated
In multiple functions of mremap.c, there is a possible use-after-free scenario in physical memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
2 affected componentsFixes available
Google Android
android/:linux_kernel:>=:0<:2025-02-05
:2025-02-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2025-02-05
Event History
Feb 1, 2025
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Feb 3, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Feb 4, 2025
News Published
via The Register·08:18 AM
Frequently Asked Questions
1
Has this vulnerability been exploited in real-world attacks?
Yes. It is flagged as exploited and as a zero-day vulnerability.
2
What level of access does an attacker need to exploit it?
Exploitation is local and can lead to escalation of privilege. The available information states that no additional execution privileges or user interaction are required.