CVE Catalog

CVE-2022-50240

Medium
Published: Translated: NVD NIST

Summary

In the Linux kernel, the Android Binder driver no longer stores a pointer to a VMA for later use outside the mmap_lock. This was unsafe because the pointer could reference freed memory.

Risk Assessment

Potential use-after-free in the Binder driver, which could lead to privilege escalation or system crash.

Recommendation

Install a Linux kernel update that includes the fix for the Binder driver.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: android: binder: stop saving a pointer to the VMA Do not record a pointer to a VMA outside of the mmap_lock for later use. This is unsafe and there are a number of failure paths *after* the recorded VMA pointer may be freed durin

Vulnerability data from NVD (NIST) · CISA KEV · EPSS