CVE-2021-31440

In __reg_combine_64_into_32 of verifier.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of...

Original description

The description as published by the source.

In __reg_combine_64_into_32 of verifier.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Android :linux_kernel:

[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-31440 linux Fixed in: 5.10.38-1

References

advisory source.android.com
patch android.googlesource.com