CVE-2022-20154: Android Linux Kernel - Use-After-Free Vulnerability in SCTP Socket Dump
Summary
CVE-2022-20154: In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. Affects :linux_kernel: versions >= :0, < :2022-06-05. Fixed in :2022-06-05. How to fix ↓
Also tracked for
- linux · Debian:11
The same CVE-2022-20154 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core of the Android operating system, managing hardware resources and providing essential services to applications. It includes various subsystems, one of which is the SCTP (Stream Control Transmission Protocol) net subsystem. This subsystem is responsible for handling network communications, particularly for applications that require reliable, message-oriented communication. The vulnerability in question arises from a use-after-free condition in the SCTP socket dump functionality, which can lead to local privilege escalation.
Vulnerability Detail
The vulnerability is a use-after-free issue located in the sctp_sock_dump function within the SCTP net subsystem. It originates from a race condition in the lock_sock_nested function of sock.c, where a socket may be freed while still being accessed. This can allow an attacker to execute arbitrary code with elevated privileges, potentially leading to a complete system compromise. The exploitation does not require user interaction, making it particularly dangerous.
How To Fix
Minimum fixed version
:2022-06-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the necessary updates as soon as they are available.
Conclusion
CVE-2022-20154 is a critical vulnerability in the Android Linux kernel that poses a significant risk due to its potential for local privilege escalation. Users are strongly advised to update their systems to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can also enhance security.
See every vulnerability recorded for :linux_kernel: →
FAQ
CVE-2022-20154 is a use-after-free vulnerability in the SCTP socket dump functionality of the Android Linux kernel, which can lead to local privilege escalation.
Devices running an affected version of the Android kernel prior to the fix released on June 5, 2022, may be vulnerable. You can use tools like Vulert to check your application for vulnerabilities.
If exploited, this vulnerability could allow an attacker to execute arbitrary code with elevated privileges, potentially compromising the entire system.
No, user interaction is not needed for exploitation, making it particularly severe.
The best protection is to update your Android kernel to the latest version that includes the security patch for CVE-2022-20154.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
