CVE-2021-29155
In several functions of verifier.c, there is a possible way to disclose kernel memory due to side channel information disclosure. This could lead to l...
Original description
The description as published by the source.
In several functions of verifier.c, there is a possible way to disclose kernel memory due to side channel information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Affected packages
Android
:linux_kernel:
[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-10-05"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-29155 linux Fixed in: 5.10.38-1
- Ubuntu UBUNTU-CVE-2021-29155 linux-azure Fixed in: 4.15.0-1121.134~14.04.1
References
- advisory source.android.com
- patch android.googlesource.com
- patch android.googlesource.com
- patch android.googlesource.com
- patch android.googlesource.com
- patch android.googlesource.com
- patch android.googlesource.com
- patch android.googlesource.com
- patch android.googlesource.com