CVE-2020-0110: 
Linux Debian vulnerability analysis and mitigation

In psi_write of psi.c, there is a possible out of bounds write vulnerability due to a missing bounds check. This vulnerability, identified as CVE-2020-0110, affects Android kernel versions and was discovered in October 2019. The vulnerability was officially disclosed in the May 2020 Android Security Bulletin (Android Bulletin, CVE Mitre).

The vulnerability exists in the psi_write function of psi.c file in the Android kernel. The core issue stems from a missing bounds check that could potentially lead to an out-of-bounds write condition. The vulnerability has been assigned Android ID A-148159562 and was addressed in kernel version 5.6-rc2 through a patch (Debian Tracker).

The vulnerability could lead to local escalation of privilege with no additional execution privileges needed. What makes this vulnerability particularly concerning is that user interaction is not required for exploitation (CVE Mitre).

The vulnerability can be exploited locally without requiring additional execution privileges or user interaction. No specific details about active exploitation in the wild have been publicly reported (CVE Mitre).

The vulnerability has been fixed in various Linux kernel versions. Debian has implemented fixes in multiple releases including version 5.10.223-1 for bullseye, 6.1.129-1 for bookworm, and 6.12.17-1 for trixie. The upstream kernel fix was implemented in version 5.6-rc2 (Debian Tracker).