CVE-2022-20141

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416CWE-667

Affected software

VendorProductVersions
n/aAndroidAndroid kernel

References

Timeline

Published
Jun 15, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-201427.8In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This couCVE-2022-201435.5In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead toCVE-2022-201447.8In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confusCVE-2022-201459.8In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could CVE-2022-201465.5In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local inCVE-2022-201477.8In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to locaCVE-2022-201486.4In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel wiCVE-2022-201497.5Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/ACVE-2022-20155.4Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.CVE-2022-201517.5Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/ACVE-2022-201526.7In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2022-201536.7In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of
CVE-2022-20141: High severity, CVSS 7.0 | Vulnix