PT-2022-14599 · Google · Android Kernel

Published

2022-08-11

·

Updated

2022-09-06

·

CVE-2022-20374

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to a possible bypass of configuration integrity due to improperly used crypto, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations For Android kernel, consider applying configuration changes to enhance the security of crypto usage until a patch is available. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.

Related Identifiers

CVE-2022-20374

Affected Products

Android Kernel