CVE-2022-20118

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a possible use after free due to a race condition in the ion ioctl and related functions of ion.c. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android kernel, consider applying a patch to fix the use after free issue in ion ioctl and related functions to prevent local escalation of privilege.