In adrenosetparam of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265016072References: Upstream kernel
{ "binaries": [ { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-azure-5.19-cloud-tools-5.19.0-1026" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-azure-5.19-headers-5.19.0-1026" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-azure-5.19-tools-5.19.0-1026" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-buildinfo-5.19.0-1026-azure" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-cloud-tools-5.19.0-1026-azure" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-headers-5.19.0-1026-azure" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-1026-azure" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-1026-azure-dbgsym" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-modules-5.19.0-1026-azure" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-modules-extra-5.19.0-1026-azure" }, { "binary_version": "5.19.0-1026.29~22.04.1", "binary_name": "linux-tools-5.19.0-1026-azure" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-buildinfo-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-buildinfo-5.19.0-42-generic-64k" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-buildinfo-5.19.0-42-generic-lpae" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-cloud-tools-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-headers-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-headers-5.19.0-42-generic-64k" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-headers-5.19.0-42-generic-lpae" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-hwe-5.19-cloud-tools-5.19.0-42" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-hwe-5.19-cloud-tools-common" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-hwe-5.19-headers-5.19.0-42" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-hwe-5.19-tools-5.19.0-42" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-hwe-5.19-tools-common" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-hwe-5.19-tools-host" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-5.19.0-42-generic-dbgsym" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-5.19.0-42-generic-lpae" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-5.19.0-42-generic-lpae-dbgsym" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-42-generic-64k" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-42-generic-64k-dbgsym" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-42-generic-dbgsym" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-5.19.0-42-generic-64k" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-5.19.0-42-generic-lpae" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-extra-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-ipu6-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-ivsc-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-modules-iwlwifi-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-source-5.19.0" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-tools-5.19.0-42-generic" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-tools-5.19.0-42-generic-64k" }, { "binary_version": "5.19.0-42.43~22.04.1", "binary_name": "linux-tools-5.19.0-42-generic-lpae" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-buildinfo-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-buildinfo-5.19.0-1024-lowlatency-64k" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-cloud-tools-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-headers-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-headers-5.19.0-1024-lowlatency-64k" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-1024-lowlatency-64k" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-1024-lowlatency-64k-dbgsym" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-image-unsigned-5.19.0-1024-lowlatency-dbgsym" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1024" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-common" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-lowlatency-hwe-5.19-headers-5.19.0-1024" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-lowlatency-hwe-5.19-tools-5.19.0-1024" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-lowlatency-hwe-5.19-tools-common" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-lowlatency-hwe-5.19-tools-host" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-modules-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-modules-5.19.0-1024-lowlatency-64k" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-modules-ipu6-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-modules-ivsc-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-modules-iwlwifi-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-tools-5.19.0-1024-lowlatency" }, { "binary_version": "5.19.0-1024.25~22.04.1", "binary_name": "linux-tools-5.19.0-1024-lowlatency-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.0.0-1020.20", "binary_name": "linux-buildinfo-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-headers-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-image-unsigned-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-image-unsigned-6.0.0-1020-oem-dbgsym" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-modules-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-modules-ipu6-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-modules-ivsc-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-modules-iwlwifi-6.0.0-1020-oem" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-oem-6.0-headers-6.0.0-1020" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-oem-6.0-tools-6.0.0-1020" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-oem-6.0-tools-host" }, { "binary_version": "6.0.0-1020.20", "binary_name": "linux-tools-6.0.0-1020-oem" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.1.0-1008.8", "binary_name": "linux-buildinfo-6.1.0-1008-oem" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-headers-6.1.0-1008-oem" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-image-unsigned-6.1.0-1008-oem" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-image-unsigned-6.1.0-1008-oem-dbgsym" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-modules-6.1.0-1008-oem" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-modules-ipu6-6.1.0-1008-oem" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-modules-ivsc-6.1.0-1008-oem" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-oem-6.1-headers-6.1.0-1008" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-oem-6.1-tools-6.1.0-1008" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-oem-6.1-tools-host" }, { "binary_version": "6.1.0-1008.8", "binary_name": "linux-tools-6.1.0-1008-oem" } ], "availability": "No subscription required" }