{"id":"ASB-A-237540956","details":"In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-237540956","CVE-2022-20422"],"modified":"2026-03-11T06:19:42.303977Z","published":"2022-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-10-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/885349f53dd73"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-10-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/885349f53dd73"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","id":"ASB-A-237540956-2b776679","digest":{"threshold":0.9,"line_hashes":["1960440008552637471522873735239669356","71844346838708569953038098060445377091","106624606123905936178813100954168939776","188858779439744046596293998490388425982","7998542420089299705562643897603328374","79396103650214263694030792217223562231","328689374300287942133517738301719913541","35230617379854447449197200111902401572","97230348670262614986427894498271489776","44336810520464106678161697200492986320","229247971708747393122600108442160232851","322694686092827087889234089072531928242","16530959085057227706431841715011493790","20727372310159674985234954931761826626","325466685051034611159332988025943913907","192153659792134627944417308329088738987","214527160207516761093630398328987179082","107808490887006591694422837588088027843"]},"source":"https://android.googlesource.com/kernel/common/+/885349f53dd73","deprecated":false,"target":{"file":"arch/arm64/kernel/armv8_deprecated.c"}},{"signature_type":"Function","signature_version":"v1","id":"ASB-A-237540956-38dedc93","digest":{"function_hash":"208061974099580248824470922620832625234","length":506},"source":"https://android.googlesource.com/kernel/common/+/885349f53dd73","deprecated":false,"target":{"function":"emulation_proc_handler","file":"arch/arm64/kernel/armv8_deprecated.c"}},{"signature_type":"Function","signature_version":"v1","id":"ASB-A-237540956-c6741cac","digest":{"function_hash":"34727716310740305401880678320967446606","length":630},"source":"https://android.googlesource.com/kernel/common/+/885349f53dd73","deprecated":false,"target":{"function":"register_insn_emulation_sysctl","file":"arch/arm64/kernel/armv8_deprecated.c"}}],"types":["EoP"],"severity":"High","spl":"2022-10-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-237540956.json"}}],"schema_version":"1.7.5"}