CVE-2020-0444

Description

In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
• v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.22%• Percentile: 13%

Techniques & Countermeasures

• CWE-763•Release of Invalid Pointer or Reference

  The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

Affected Systems

• debian•linux

  < 5.5.13-1 | < 5.5.13-1 | < 5.5.13-1 | < 5.5.13-1

• ubuntu•linux

  < 4.4.0-178.208 | < 4.15.0-99.100

• ubuntu•linux-aws

  < 4.4.0-1066.70 | < 4.4.0-1106.117 | < 4.15.0-1066.70

• ubuntu•linux-aws-5.0

  all

• ubuntu•linux-aws-5.3

  all

• ubuntu•linux-aws-fips

  < 4.15.0-2018.18 | all

• ubuntu•linux-aws-hwe

  < 4.15.0-1066.70~16.04.1

• ubuntu•linux-azure

  < 4.15.0-1082.92~14.04.1 | < 4.15.0-1082.92~16.04.1 | all

• ubuntu•linux-azure-5.3

  all

• ubuntu•linux-azure-edge

  all

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-azure-fips

  < 4.15.0-2006.7 | all

• ubuntu•linux-bluefield

  all

• ubuntu•linux-fips

  < 4.4.0-1033.38 | all | < 4.15.0-1029.34

• ubuntu•linux-gcp

  < 4.15.0-1061.65 | all

• ubuntu•linux-gcp-5.3

  all

• ubuntu•linux-gcp-edge

  all

• ubuntu•linux-gcp-fips

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-gke-4.15

  < 4.15.0-1058.61

• ubuntu•linux-gke-5.0

  < 5.0.0-1035.36

• ubuntu•linux-gke-5.3

  < 5.3.0-1018.19~18.04.1

• ubuntu•linux-hwe

  < 4.15.0-99.100~16.04.1 | all

• ubuntu•linux-hwe-edge

  all | all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-kvm

  < 4.4.0-1070.77 | < 4.15.0-1059.60

• ubuntu•linux-lts-xenial

  < 4.4.0-178.208~14.04.1

• ubuntu•linux-oem

  all

• ubuntu•linux-oem-osp1

  < 5.0.0-1050.55

• ubuntu•linux-oracle

  < 4.15.0-1038.42~16.04.1 | < 4.15.0-1038.42

• ubuntu•linux-oracle-5.0

  all

• ubuntu•linux-oracle-5.3

  all

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.4.0-1132.141 | < 4.15.0-1061.65 | all

• ubuntu•linux-raspi2-5.3

  < 5.3.0-1023.25~18.04.1

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all | all

• ubuntu•linux-snapdragon

  < 4.4.0-1136.144 | < 4.15.0-1077.84

• google•android

  na

References (5)

• https://source.android.com/security/bulletin/2020-12-01
• https://ubuntu.com/security/CVE-2020-0444
• https://git.kernel.org/linus/2ad3e17ebf94b7b7f3f64c050ff168f9915345eb
• https://www.cve.org/CVERecord?id=CVE-2020-0444
• https://security-tracker.debian.org/tracker/CVE-2020-0444