OESA-2022-1846

Dashboard / Vulnerabilities / OESA-2022-1846

OESA-2022-1846

Summary: kernel security update

Details: Security Fix(es): The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.(CVE-2022-36123) In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel(CVE-2022-20369)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1846, https://nvd.nist.gov/vuln/detail/CVE-2022-36123, https://nvd.nist.gov/vuln/detail/CVE-2022-20369