UBUNTU-CVE-2022-20421
Dashboard / Vulnerabilities / UBUNTU-CVE-2022-20421
UBUNTU-CVE-2022-20421
Summary:
Details: In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel
References: https://ubuntu.com/security/CVE-2022-20421, https://source.android.com/docs/security/bulletin/2022-10-01, https://git.kernel.org/linus/a0e44c64b6061dda7e00b7c458e4523e2331b739, https://ubuntu.com/security/notices/USN-5790-1, https://ubuntu.com/security/notices/USN-5791-1, https://ubuntu.com/security/notices/USN-5792-1, https://ubuntu.com/security/notices/USN-5793-1, https://ubuntu.com/security/notices/USN-5791-2, https://ubuntu.com/security/notices/USN-5792-2, https://ubuntu.com/security/notices/USN-5793-2, https://ubuntu.com/security/notices/USN-5791-3, https://ubuntu.com/security/notices/USN-5793-3, https://ubuntu.com/security/notices/USN-5793-4, https://ubuntu.com/security/notices/USN-5815-1, https://ubuntu.com/security/notices/USN-5877-1, https://www.cve.org/CVERecord?id=CVE-2022-20421
Affected packages
Package
Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
