UBUNTU-CVE-2021-39636
In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-120612905References: Upstream kernel
02 / AFFECTED SOFTWARE
Affected packages
50 explicit affected versions
6 explicit affected versions
6 explicit affected versions
57 explicit affected versions
191 explicit affected versions
7 explicit affected versions
12 explicit affected versions
4 explicit affected versions
23 explicit affected versions
72 explicit affected versions
1 explicit affected versions
21 explicit affected versions
7 explicit affected versions
12 explicit affected versions
1 explicit affected versions
7 explicit affected versions
138 explicit affected versions
71 explicit affected versions
4 explicit affected versions
29 explicit affected versions
13 explicit affected versions
7 explicit affected versions
33 explicit affected versions
10 explicit affected versions
11 explicit affected versions
12 explicit affected versions
7 explicit affected versions
2 explicit affected versions
8 explicit affected versions
15 explicit affected versions
16 explicit affected versions
5 explicit affected versions
10 explicit affected versions
44 explicit affected versions
16 explicit affected versions
38 explicit affected versions
9 explicit affected versions
115 explicit affected versions
34 explicit affected versions
50 explicit affected versions
4 explicit affected versions
43 explicit affected versions
93 explicit affected versions
4 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-120612905References: Upstream kernel
05 / REFERENCES