CVE-2022-20344: surfaceflinger EventThreadConnection::stealReceiveChannel fdsan crash
Summary
CVE-2022-20344: In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. Affects platform/frameworks/native across 4 version ranges.
>= 10:0, < 10:2022-08-01
>= 11:0, < 11:2022-08-01
>= 12:0, < 12:2022-08-01
>= 12L:0, < 12L:2022-08-01
Fixed in 10:2022-08-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/frameworks/native in the Android ecosystem. This package is responsible for providing native libraries and frameworks for the Android operating system. It plays a crucial role in enabling various system functionalities and interactions. However, a vulnerability has been identified in the package, which can lead to local escalation of privilege.
Vulnerability Detail
The vulnerability resides in the stealReceiveChannel function of EventThread.cpp. It is caused by a race condition, which allows an attacker to interfere with process communication. Exploiting this vulnerability does not require any additional execution privileges or user interaction. The consequences of successful exploitation can be severe, as it enables an attacker to elevate their privileges on the local system.
How To Fix
Minimum fixed version
10:2022-08-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the surfaceflinger EventThreadConnection::stealReceiveChannel fdsan crash vulnerability in the platform/frameworks/native package poses a significant risk of local privilege escalation. It is crucial to apply the provided patches and update the affected package to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for platform/frameworks/native →
FAQ
This vulnerability allows an attacker to escalate their privileges on the local system, potentially gaining unauthorized access to sensitive information or performing malicious actions.
No, user interaction is not needed for exploiting this vulnerability.
The vulnerability was introduced in versions 10 and onwards of the Android ecosystem. It has been fixed in versions 10, 11, 12, and 12L as of August 1, 2022.
Applying the provided patches and updating the affected package to a fixed version will mitigate this vulnerability.
You can find more information about this vulnerability in the Android Open Source Vulnerability database. The source link for this vulnerability is: https://storage.googleapis.com/android-osv/ASB-A-232541124.json
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/native.
