PT-2022-14361 · Google · Android Kernel
Published
2022-05-10
·
Updated
2022-05-17
·
CVE-2022-20118
CVSS v2.0
6.9
Medium
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a possible use after free due to a race condition in the ion ioctl and related functions of ion.c. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations
For Android kernel, consider applying a patch to fix the use after free issue in ion ioctl and related functions to prevent local escalation of privilege.
Fix
Use After Free
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Android Kernel