ASB-A-112551163

Source

https://storage.googleapis.com/android-osv/ASB-A-112551163.json

Aliases

CVE-2022-20141 ( ALSA-2023:2148, ALSA-2023:2458, ALSA-2023:2736, ALSA-2023:2951 )

Published

2022-06-01T00:00:00Z

Modified

2023-09-22T14:42:09Z

Details

In ipcheckmc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2022-06-01
https://android.googlesource.com/kernel/common/+/ddd7e8b7b8483

Affected packages

Android / :linux_kernel:

Source Details

Package Name: :linux_kernel:

Affected ranges

Type: ECOSYSTEM
Events: Introduced

:0

Fixed

:2022-06-05

Affected versions

Other

Kernel

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/kernel/common/+/ddd7e8b7b8483"
    ],
    "spl": "2022-06-05",
    "types": [
        "EoP"
    ],
    "severity": "High"
}