{"schema_version":"1.9.0","id":"ASB-A-363259128","published":"2025-03-01T00:00:00Z","modified":"2026-09-08T15:39:03.104189951Z","aliases":["A-363259128","CVE-2024-46852"],"details":"In cma_heap_vm_fault of cma_heap.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2025-03-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/35fae63593135636e7f80a3570e0ee45e63b6b19","https://android.googlesource.com/kernel/common/+/84175dc5b2c932266a50c04e5ce342c30f817a2f"],"severity":"High","spl":"2025-03-05","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"336864718950520289007742831202896736534","length":267},"id":"ASB-A-363259128-052cc269","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/84175dc5b2c932266a50c04e5ce342c30f817a2f","target":{"file":"drivers/dma-buf/heaps/cma_heap.c","function":"cma_heap_vm_fault"}},{"deprecated":false,"digest":{"line_hashes":["339621506806220627098678873922355972834","19348749815832236290871660071553671966","63114752964307851660569151026683450338","201819559666664305960872606169000782680"],"threshold":0.9},"id":"ASB-A-363259128-56312a4d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/84175dc5b2c932266a50c04e5ce342c30f817a2f","target":{"file":"drivers/dma-buf/heaps/cma_heap.c"}},{"deprecated":false,"digest":{"function_hash":"336864718950520289007742831202896736534","length":267},"id":"ASB-A-363259128-6121bd9f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/35fae63593135636e7f80a3570e0ee45e63b6b19","target":{"file":"drivers/dma-buf/heaps/cma_heap.c","function":"cma_heap_vm_fault"}},{"deprecated":false,"digest":{"line_hashes":["339621506806220627098678873922355972834","19348749815832236290871660071553671966","63114752964307851660569151026683450338","201819559666664305960872606169000782680"],"threshold":0.9},"id":"ASB-A-363259128-83b66e28","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/35fae63593135636e7f80a3570e0ee45e63b6b19","target":{"file":"drivers/dma-buf/heaps/cma_heap.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363259128.json"}}],"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-03-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/35fae63593135636e7f80a3570e0ee45e63b6b19"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/84175dc5b2c932266a50c04e5ce342c30f817a2f"}]}