CVEvulnerability

CVE-2022-20141

7.0 HIGH Published 2022-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362, CWE-416, CWE-667

Description

In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel

Affected configurations

• google android

Related

Weakness · CWE (3)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-416 Use After Free weakness
  • CWE-667 Improper Locking weakness

Referenced by CWE · observed example (2)

  • CWE-413 Improper Resource Locking weakness
  • CWE-416 Use After Free weakness

References