Google Android Kernel Elevation of Privilege Vulnerability (CNVD-2022-01771)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability is caused by an out-of-bounds write in lwis_periodic_io.c’s periodic_io_work_func due to post-release reuse. An attacker could exploit this vulnerability to elevate local privileges.