CVE Catalog
CVE-2022-50240
MediumSummary
In the Linux kernel, the Android Binder driver no longer stores a pointer to a VMA for later use outside the mmap_lock. This was unsafe because the pointer could reference freed memory.
Risk Assessment
Potential use-after-free in the Binder driver, which could lead to privilege escalation or system crash.
Recommendation
Install a Linux kernel update that includes the fix for the Binder driver.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: android: binder: stop saving a pointer to the VMA Do not record a pointer to a VMA outside of the mmap_lock for later use. This is unsafe and there are a number of failure paths *after* the recorded VMA pointer may be freed durin

