CVE-2021-0512

Description

In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
• v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.28%• Percentile: 21%

Techniques & Countermeasures

• CWE-787•Out-of-bounds Write

  The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

• debian•linux

  < 5.10.19-1 | < 5.10.19-1 | < 5.10.19-1 | < 5.10.19-1

• ubuntu•linux

  all | < 4.4.0-208.240 | < 4.15.0-143.147 | < 5.4.0-71.79

• ubuntu•linux-aws

  < 4.4.0-1090.94 | < 4.4.0-1126.140 | < 4.15.0-1102.109 | < 5.4.0-1043.45

• ubuntu•linux-aws-5.0

  all

• ubuntu•linux-aws-5.3

  all

• ubuntu•linux-aws-5.4

  < 5.4.0-1043.45~18.04.1

• ubuntu•linux-aws-fips

  < 4.15.0-2044.46 | all | < 5.4.0-1069.73+fips2

• ubuntu•linux-aws-hwe

  < 4.15.0-1102.109~16.04.1

• ubuntu•linux-azure

  < 4.15.0-1114.127~14.04.1 | < 4.15.0-1114.127~16.04.1 | all | < 5.4.0-1044.46

• ubuntu•linux-azure-4.15

  < 4.15.0-1114.127

• ubuntu•linux-azure-5.3

  all

• ubuntu•linux-azure-5.4

  < 5.4.0-1044.46~18.04.1

• ubuntu•linux-azure-edge

  all

• ubuntu•linux-azure-fips

  < 4.15.0-2026.29 | all | < 5.4.0-1073.76+fips1

• ubuntu•linux-bluefield

  all

• ubuntu•linux-dell300x

  < 4.15.0-1018.22

• ubuntu•linux-fips

  < 4.4.0-1060.66 | all | < 4.15.0-1059.67

• ubuntu•linux-gcp

  < 4.15.0-1099.112~16.04.1 | all | < 5.4.0-1041.44

• ubuntu•linux-gcp-4.15

  < 4.15.0-1099.112

• ubuntu•linux-gcp-5.3

  all

• ubuntu•linux-gcp-5.4

  < 5.4.0-1041.44~18.04.1

• ubuntu•linux-gcp-edge

  all

• ubuntu•linux-gcp-fips

  all | < 5.4.0-1067.71~20.04.1

• ubuntu•linux-gke

  < 5.4.0-1041.43

• ubuntu•linux-gke-4.15

  all

• ubuntu•linux-gke-5.4

  < 5.4.0-1040.42~18.04.1

• ubuntu•linux-gkeop

  < 5.4.0-1013.14

• ubuntu•linux-gkeop-5.4

  < 5.4.0-1013.14~18.04.1

• ubuntu•linux-hwe

  < 4.15.0-143.147~16.04.3 | all

• ubuntu•linux-hwe-5.4

  < 5.4.0-71.79~18.04.1

• ubuntu•linux-hwe-5.8

  < 5.8.0-53.60~20.04.1

• ubuntu•linux-hwe-edge

  all | all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-kvm

  < 4.4.0-1091.100 | < 4.15.0-1091.93 | < 5.4.0-1037.38

• ubuntu•linux-lts-xenial

  < 4.4.0-208.240~14.04.1

• ubuntu•linux-oem

  all

• ubuntu•linux-oem-5.10

  < 5.10.0-1021.22

• ubuntu•linux-oem-5.6

  all

• ubuntu•linux-oracle

  < 4.15.0-1071.79~16.04.1 | < 4.15.0-1071.79 | < 5.4.0-1042.45

• ubuntu•linux-oracle-5.0

  all

• ubuntu•linux-oracle-5.3

  all

• ubuntu•linux-oracle-5.4

  < 5.4.0-1042.45~18.04.1

• ubuntu•linux-raspi

  < 5.4.0-1033.36

• ubuntu•linux-raspi-5.4

  < 5.4.0-1033.36~18.04.1

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.15.0-1085.90 | all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all

• ubuntu•linux-riscv-5.8

  < 5.8.0-25.27~20.04.1

• ubuntu•linux-snapdragon

  < 4.15.0-1102.111

Showing first 50 affected entries in server-rendered view.

References (5)

• https://source.android.com/security/bulletin/2021-06-01
• https://ubuntu.com/security/CVE-2021-0512
• https://git.kernel.org/linus/ed9be64eefe26d7d8b0b5b9fa3ffdf425d87a01f
• https://www.cve.org/CVERecord?id=CVE-2021-0512
• https://security-tracker.debian.org/tracker/CVE-2021-0512