Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-20566

Опубликовано: 16 дек. 2022
Источник: debian
EPSS Низкий

Описание

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed5.18.16-1package
linuxfixed5.10.136-1bullseyepackage
linuxfixed4.19.260-1busterpackage

Примечания

  • https://git.kernel.org/linus/d0be8347c623e0ac4202a1d4e0373882821f56b0

EPSS

Процентиль: 4%
0.00019
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 3 лет назад

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel

CVSS3: 7
redhat
больше 3 лет назад

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel

CVSS3: 7.8
nvd
около 3 лет назад

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel

CVSS3: 7.8
github
около 3 лет назад

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel

CVSS3: 7.8
fstec
больше 3 лет назад

Уязвимость функции l2cap_chan_put() (l2cap_core.с) ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 4%
0.00019
Низкий