In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "79247195589095590568277055161225283220", "141414295815732894816063577265325991000", "86473914779299051518878460939143540079", "19493245227855791870427344486394842495", "334520433686633874808459603621294536512" ] }, "id": "PUB-A-160822094-b4a48689", "source": "https://android.googlesource.com/kernel/common/+/64e6bbfff52db4bf6785fab9cffab850b2de6870", "deprecated": false, "signature_version": "v1", "target": { "file": "drivers/usb/gadget/configfs.c", "truncated_path_level": 1.0 }, "signature_type": "Line" }, { "digest": { "length": 178.0, "function_hash": "337555850625797397627801719672181788232" }, "id": "PUB-A-160822094-f2e060a8", "source": "https://android.googlesource.com/kernel/common/+/64e6bbfff52db4bf6785fab9cffab850b2de6870", "deprecated": false, "signature_version": "v1", "target": { "file": "drivers/usb/gadget/configfs.c", "truncated_path_level": 1.0, "function": "gadget_dev_desc_UDC_show" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/kernel/common/+/64e6bbfff52db4bf6785fab9cffab850b2de6870" ], "spl": "2021-12-05", "severity": "Moderate", "types": [ "ID" ] }