PT-2022-4146 · Google+7 · Android Kernel+7

Published 2022-03-15 · Updated 2025-01-17 · CVE-2022-20368

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android kernel versions (affected versions not specified)

Description The issue is related to a buffer overflow in the packet recvmsg() function of the Android operating system kernel. This could allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2022:7444

ALSA-2022:7683

ALSA-2022:7933

ALSA-2022:8267

BDU:2022-04989

CESA-2022_7444

CESA-2022_7683

CVE-2022-20368

OESA-2022-1839

OESA-2022-1840

OESA-2022-1841

OPENSUSE-SU-2022_3264-1

OPENSUSE-SU-2022_3288-1

OPENSUSE-SU-2022_3293-1

OPENSUSE-SU-2022_3408-1

OPENSUSE-SU-2022_3609-1

OPENSUSE-SU-2022_4617-1

OPENSUSE-SU-2024_3249-1

RHSA-2022:7444

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7444

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

RHSA-2024:0930

RLSA-2022:7444

RLSA-2022:7683

SUSE-SU-2022:3263-1

SUSE-SU-2022:3264-1

SUSE-SU-2022:3265-1

SUSE-SU-2022:3274-1

SUSE-SU-2022:3282-1

SUSE-SU-2022:3288-1

SUSE-SU-2022:3291-1

SUSE-SU-2022:3293-1

SUSE-SU-2022:3294-1

SUSE-SU-2022:3408-1

SUSE-SU-2022:3422-1

SUSE-SU-2022:3450-1

SUSE-SU-2022:3609-1

SUSE-SU-2022:3809-1

SUSE-SU-2022:4617-1

SUSE-SU-2023:0416-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2940-1

SUSE-SU-2024:3249-1

SUSE-SU-2024:3467-1

SUSE-SU-2024:3499-1

SUSE-SU-2024_3467-1

SUSE-SU-2025:0152-1

USN-5580-1

USN-5650-1

Affected Products

Almalinux

Android Kernel

Astra Linux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1620

• https://linux.oracle.com/errata/ELSA-2022-10065.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3499-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1839 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3467-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3274-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2901-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3264-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3263-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/687312 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3294-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-8267.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:7444 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3265-1 · Vendor Advisory