CVE-2022-20422
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local privilege escalation without additional execution privileges or user interaction.
Risk Assessment
A local attacker could exploit this vulnerability to escalate privileges, potentially leading to full device compromise.
Recommendation
Install Android kernel updates that include the fix for this issue and monitor devices for suspicious activity.
Other vulnerabilities in Android kernel
See all- CVE-2017-13174High
CVE-2017-13174 is a privilege escalation vulnerability in the Android kernel. It affects Android kernel versions and may allow unauthorized access to system resources.
- CVE-2017-13168High
CVE-2017-13168 is a privilege escalation vulnerability in the Android kernel SCSI driver. It affects the Android kernel in versions related to Android ID A-65023233.
- CVE-2017-13167High
CVE-2017-13167 describes an elevation of privilege vulnerability in the kernel sound timer of Android. It affects the Android kernel in versions that do not include patches.
- CVE-2017-13165Medium
An elevation of privilege vulnerability in the Android kernel file system. Affects the Android kernel (Android ID A-31269937).
- CVE-2017-13164High
An information disclosure vulnerability in the kernel binder driver of Android. It affects the Android kernel and may lead to unauthorized access to sensitive data.
- CVE-2017-13163High
CVE-2017-13163 is a privilege escalation vulnerability in the MTP USB driver in the Android kernel. It affects Android kernel versions.
- CVE-2017-13162High
CVE-2017-13162 is a privilege escalation vulnerability in the Android kernel, which may allow unauthorized access to system resources.
- CVE-2017-0864High
CVE-2017-0864 is a privilege escalation vulnerability in the MediaTek ioctl (flashlight) in Android. It affects the Android kernel.
- CVE-2017-0862High
CVE-2017-0862 is a privilege escalation vulnerability in the Android kernel. It affects unspecified versions of the Android kernel.
- CVE-2017-0794High
CVE-2017-0794 is a privilege escalation vulnerability in the Upstream kernel SCSI driver. It affects the Android operating system and its kernel.
Original NVD description (English source)
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel
Vulnerability data from NVD (NIST) · CISA KEV · EPSS