In packetsetring of af_packet.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"id": "PUB-A-213464034-307416a9",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"56842754286908954858751883799803078452",
"333234908957074952355064169353376078837",
"307263399136416505205360331004710447305",
"189080069852238399985646265830191533788",
"240894796540615228570731438920408101816",
"123630893940014694020920663064138072003"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://android.googlesource.com/kernel/common/+/27fc5a7c6972bd73ac0cc0cf811ec2ecb989014f",
"target": {
"file": "net/packet/af_packet.c"
}
},
{
"id": "PUB-A-213464034-8c4be790",
"signature_version": "v1",
"digest": {
"length": 3611.0,
"function_hash": "83320058568458924176981676132243978100"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://android.googlesource.com/kernel/common/+/27fc5a7c6972bd73ac0cc0cf811ec2ecb989014f",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
}
}
],
"types": [
"EoP"
],
"severity": "Moderate",
"fixes": [
"https://android.googlesource.com/kernel/common/+/27fc5a7c6972bd73ac0cc0cf811ec2ecb989014f"
],
"spl": "2022-03-05"
}