CVE-2019-9444 - kernel: kernel pointer leak in sync debug fs driver leads to local information disclosure

Back Back to CVE browser

MEDIUM

kernel: kernel pointer leak in sync debug fs driver leads to local information disclosure

Published Sep 6, 2019

4.4

MEDIUM

CVSS 3.0

EPSS 0.20%

Description

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor n/a Product Android Default
n/a
- Version
  Android kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Android

n/a

Version	Status	Constraints
Android kernel	affected	-

Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-alt

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise MRG 2

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-alt	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise MRG 2	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (5)

https://access.redhat.com/security/cve/CVE-2019-9444
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1819433
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2019-9444
https://source.android.com/security/bulletin/pixel/2019-09-01
x_refsource_MISCVendor Advisory
https://www.cve.org/CVERecord?id=CVE-2019-9444

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-9444		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1819433		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2019-9444
https://source.android.com/security/bulletin/pixel/2019-09-01		x_refsource_MISCVendor Advisory
https://www.cve.org/CVERecord?id=CVE-2019-9444