CVE-2022-20153
published 2022-06-15CVE-2022-20153: In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the…
PriorityP429medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.12%
2.5th percentile
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv6.7MEDIUM
vendor_debian6.7MEDIUM
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v8wc-wjww-427g: In rcu_cblist_dequeue of rcu_segcblist
ghsa_unreviewed·2022-06-16
CVE-2022-20153 [HIGH] CWE-416 GHSA-v8wc-wjww-427g: In rcu_cblist_dequeue of rcu_segcblist
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel
OSV
CVE-2022-20153: In rcu_cblist_dequeue of rcu_segcblist
osv·2022-06-15·CVSS 6.7
CVE-2022-20153 [MEDIUM] CVE-2022-20153: In rcu_cblist_dequeue of rcu_segcblist
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel
OSV
CVE-2022-20153: In rcu_cblist_dequeue of rcu_segcblist
osv·2022-06-01
CVE-2022-20153 CVE-2022-20153: In rcu_cblist_dequeue of rcu_segcblist
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
Red Hat
kernel: possible use-after-free due to improper locking in rcu_cblist_dequeue of rcu_segcblist.c
vendor_redhat·2022-03-23·CVSS 6.7
CVE-2022-20153 [MEDIUM] kernel: possible use-after-free due to improper locking in rcu_cblist_dequeue of rcu_segcblist.c
kernel: possible use-after-free due to improper locking in rcu_cblist_dequeue of rcu_segcblist.c
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel
A use-after-free flaw was found in the Linux kernel’s io_uring (in fs/io_uring.c) when improper locking happens. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Statement: At this time, no Red Hat Enterprise Linux products ship with support for this feature. There is an outstanding feature request for io_ur
Debian
CVE-2022-20153: linux - In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due...
vendor_debian·2022·CVSS 6.7
CVE-2022-20153 [MEDIUM] CVE-2022-20153: linux - In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due...
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.113-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
No detection rules found.
No public exploits indexed.
2022-06-15
Published