CVE-2022-20166

Updated: 2023-12-06

CWE: Out-of-bounds Write

Description:

In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel

CVSS3: 6.7


Vendor State

OS Vendor version Errata
Ubuntu 18.04 HWE Focal 5.4.0-105.119~18.04.1 USN-5338-1
Ubuntu 20.04 5.4.0-105.119 USN-5338-1
Ubuntu 18.04 AWS Focal 5.4.0-1069.73~18.04.1 USN-5338-1
Ubuntu 18.04 Azure Focal 5.4.0-1073.76~18.04.1 USN-5338-1
Ubuntu 20.04 AWS 5.4.0-1069.73 USN-5338-1

KernelCare State

OS Original kernel version State
Ubuntu 18.04 HWE Focal
Will Not Fix
Ubuntu 20.04
Will Not Fix
Ubuntu 18.04 AWS Focal
Will Not Fix
Ubuntu 18.04 Azure Focal
Will Not Fix
Ubuntu 20.04 AWS
Will Not Fix