REDHAT-BUG-1919889: Medium severity android linux kernel vulnerability
In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459
References: https://android.googlesource.com/kernel/common/+/cb0a3edf8d00 https://source.android.com/security/bulletin/pixel/2020-09-01
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1919889?
The severity of REDHAT-BUG-1919889 is considered high due to its potential for local escalation of privilege.
How do I fix REDHAT-BUG-1919889?
To fix REDHAT-BUG-1919889, apply the appropriate security updates from the Android kernel product team.
What causes the vulnerability REDHAT-BUG-1919889?
The vulnerability REDHAT-BUG-1919889 is caused by a missing bounds check in the kbd_keycode function of keyboard.c.
Who is affected by REDHAT-BUG-1919889?
Users of the affected versions of the Google Android kernel may experience the vulnerability REDHAT-BUG-1919889.
Can REDHAT-BUG-1919889 be exploited without user interaction?
Yes, REDHAT-BUG-1919889 can be exploited without any user interaction required.