7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
3.5 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to
corrupt memory due to a race condition. This could lead to local escalation
of privilege with no additional execution privileges needed. User
interaction is not needed for exploitation.Product: AndroidVersions:
Android kernelAndroid ID: A-237540956References: Upstream kernel
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < 4.15.0-197.208 | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < 5.4.0-132.148 | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < 5.15.0-53.59 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < 4.15.0-1143.155 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1089.97 | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < 5.15.0-1023.27 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws-5.15 | < 5.15.0-1023.27~20.04.1 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws-5.4 | < 5.4.0-1089.97~18.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws-hwe | < 4.15.0-1143.155~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < 5.4.0-1095.101 | UNKNOWN |
git.kernel.org/linus/af483947d472eccb79e42059276c4deed76f99a6 (6.0-rc1)
launchpad.net/bugs/cve/CVE-2022-20422
nvd.nist.gov/vuln/detail/CVE-2022-20422
security-tracker.debian.org/tracker/CVE-2022-20422
source.android.com/docs/security/bulletin/2022-10-01
ubuntu.com/security/notices/USN-5727-1
ubuntu.com/security/notices/USN-5727-2
ubuntu.com/security/notices/USN-5728-1
ubuntu.com/security/notices/USN-5728-2
ubuntu.com/security/notices/USN-5728-3
ubuntu.com/security/notices/USN-5729-1
ubuntu.com/security/notices/USN-5729-2
ubuntu.com/security/notices/USN-5774-1
www.cve.org/CVERecord?id=CVE-2022-20422
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
3.5 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%