CVE-2022-20421

Name	CVE-2022-20421
Description	In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3173-1, DSA-5257-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.234-1	fixed
	bookworm	6.1.129-1	fixed
	bookworm (security)	6.1.135-1	fixed
	trixie	6.12.25-1	fixed
	sid	6.12.27-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux	source	buster	4.19.260-1
linux	source	bullseye	5.10.149-1	DSA-5257-1
linux	source	(unstable)	5.19.11-1
linux-5.10	source	buster	5.10.149-2~deb10u1	DLA-3173-1

https://source.android.com/docs/security/bulletin/2022-10-01
https://git.kernel.org/linus/a0e44c64b6061dda7e00b7c458e4523e2331b739 (6.0-rc4)