PT-2022-14361
CVE-2022-20118
·
تاريخ النشر
2022-05-10
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 2.0
6.9
متوسطةالمقاييسAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a possible use after free due to a race condition in the ion ioctl and related functions of ion.c. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations
For Android kernel, consider applying a patch to fix the use after free issue in ion ioctl and related functions to prevent local escalation of privilege.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾