CVE-2022-20155

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a possible use-after-free due to a race condition in the ipu core jqs msg transport kernel write sync function of ipu-core-jqs-msg-transport.c. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android kernel, consider applying a patch to fix the use-after-free issue in the ipu core jqs msg transport kernel write sync function as a permanent solution. As a temporary workaround, restrict access to the affected kernel module to minimize the risk of exploitation.