VDB
CVE-2021-0512
CVE-2021-0512
PUBLISHED
CVSS 7.800000190734863 HIGH
In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel
EPSS 0.28% · 20.7th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.28%
20.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | linux-gkeop | 0, 5.4.0-1009.10, 5.4.0-1012.13 |
| Ubuntu:18.04:LTS | linux-aws | 4.15.0-1021.21, 4.15.0-1087.92, 4.15.0-1090.95 |
| Ubuntu:18.04:LTS | linux-dell300x | 0, 4.15.0-1005.8, 4.15.0-1006.10 |
| Ubuntu:18.04:LTS | linux-gcp-4.15 | 4.15.0-1090.103, 0, 4.15.0-1071.81 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-aws-fips | 5.4.0-1021.21+fips2, 0 |
| Ubuntu:20.04:LTS | linux-gcp | 5.3.0-1009.10, 5.4.0-1007.7, 5.4.0-1032.34 |
| Ubuntu:18.04:LTS | linux-azure-edge | 4.18.0-1006.6~18.04.1, 0, 4.18.0-1008.8~18.04.1 |
| Ubuntu:18.04:LTS | linux-snapdragon | 4.15.0-1053.57, 4.15.0-1096.105, 4.15.0-1086.94 |
| Ubuntu:Pro:16.04:LTS | linux-gcp | 4.15.0-1061.65, 4.13.0-1008.11, 4.13.0-1011.15 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-aws-fips | 5.4.0-1021.21+fips2, 0 |
| Ubuntu:18.04:LTS | linux-gke-4.15 | 4.15.0-1064.67, 4.15.0-1063.66, 4.15.0-1059.62 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-aws-fips | 0, 4.15.0-2000.4 |
| Ubuntu:22.04:LTS | linux-realtime | 5.15.0-1032.35, 0 |
| Ubuntu:Pro:14.04:LTS | linux | 3.13.0-61.100, 3.12.0-5.13, 3.13.0-30.55 |
| Ubuntu:18.04:LTS | linux-hwe | 4.18.0-22.23~18.04.1, 5.3.0-66.60, 5.3.0-69.65 |
| Ubuntu:18.04:LTS | linux-oracle | 4.15.0-1070.78, 4.15.0-1025.28, 0 |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 5.0.0-1022.25~18.04.1, 5.0.0-1027.30, 5.0.0-1025.28 |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | 5.0.0-1008.13~18.04.1, 5.0.0-1009.14~18.04.1, 5.0.0-1010.15~18.04.1 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 0, 5.15.0-1073.75 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 4.15.0-2000.4, 0, 4.15.0-2025.25 |
…and 56 more
Timeline
- Jun 8, 2021 CVE Published
- Jun 22, 2021 EPSS Score
- Jun 22, 2021 PoC Published
- Aug 22, 2021 EPSS Score
- Oct 22, 2021 EPSS Score
- Dec 22, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 22, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 24, 2022 EPSS Score
- Jun 24, 2022 EPSS Score
- Aug 25, 2022 EPSS Score
References
- https://git.kernel.org/linus/ed9be64eefe26d7d8b0b5b9fa3ffdf425d87a01f third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-0512 third-party-advisory
- https://ubuntu.com/security/CVE-2021-0512 advisory