CVE-2021-38160

In get_inbuf and control_work_handler of virtio_console.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to...

Original description

The description as published by the source.

In get_inbuf and control_work_handler of virtio_console.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Android :linux_kernel:

[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-38160 linux Fixed in: 5.14.6-1
Ubuntu UBUNTU-CVE-2021-38160 linux-aws Fixed in: 4.4.0-1102.107

References

advisory source.android.com
patch android.googlesource.com