PUB-A-216408350 — Vulnetix

PUB-A-216408350 PUBLISHED

In fget() of multiple locations, there is a possible read after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
Android	:linux_kernel:	:0, Kernel, *

Timeline

May 1, 2022 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2022-05-01 advisory
https://android.googlesource.com/kernel/common/+/054aa8d439b9185d4f5eb9a90282d1ce74772969 patch

Open in Interactive Console →