In hsofreenet_device of net/usb/hso.c, there is a possible use after free bug. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 1671.0, "function_hash": "298137499518198046083903344143831194390" }, "id": "PUB-A-195082947-94280cbc", "source": "https://android.googlesource.com/kernel/common/+/b10dd066ea063", "deprecated": false, "signature_version": "v1", "target": { "file": "drivers/net/usb/hso.c", "function": "hso_create_net_device" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "156282893777389539489004679344848890106", "225117206975891230219727731613576980352", "130233698345843230676753961208034863234", "126929904214987551869022099334461746031", "110077989494485997144708421745799580075", "168318541572538511115501495027413516383", "96587662042684001300105669062687269366", "36447792687420169932546913197071659198", "145583491195242609389987204402006427302", "267093625285464366181271664894917707801", "291698062750314684977066088732659534393" ] }, "id": "PUB-A-195082947-b195268e", "source": "https://android.googlesource.com/kernel/common/+/b10dd066ea063", "deprecated": false, "signature_version": "v1", "target": { "file": "drivers/net/usb/hso.c" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/kernel/common/+/88b912e02d75b", "https://android.googlesource.com/kernel/common/+/b10dd066ea063" ], "spl": "2022-03-05", "severity": "Moderate", "types": [ "EoP" ] }