SELinux/netlink vulnerability

2020-08-0100:00:00

Google

osv.dev

0.002 Low

EPSS

Percentile

63.7%

JSON

In selinux_netlink_send of hooks.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
:linux_kernel:eqKernel

CPE	Name	Operator	Version
	:linux_kernel:	eq	Kernel

References

android.googlesource.com/kernel/common/+/fb73974172ff

source.android.com/security/bulletin/2020-08-01

0.002 Low

EPSS

Percentile

63.7%

JSON

Related for OSV:ASB-A-155485360