DEBIAN-CVE-2022-20141

DEBIAN-CVE-2022-20141 PUBLISHED CVSS 7 HIGH

In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel

Risk Scores

CVSS v3.1

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:11	linux	5.10.46-5, 5.10.46-5, 5.10.70-1
Debian:12	linux	0, 0, 0
Debian:13	linux	0, 0, 0
Debian:14	linux	0, 0, 0

Timeline

Jun 15, 2022 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2022-20141 advisory

Open in Interactive Console →