{"id":"ASB-A-216825460","details":"In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-216825460","CVE-2022-20227"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2022-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-07-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/fb4ff0f96de37"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-07-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","id":"ASB-A-216825460-0c041093","target":{"function":"gadgetfs_setup","file":"drivers/usb/gadget/legacy/inode.c","truncated_path_level":1},"deprecated":false,"digest":{"function_hash":"51759867175630936810844205975104072139","length":3917},"source":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"signature_type":"Line","signature_version":"v1","id":"ASB-A-216825460-1e337065","target":{"file":"drivers/usb/gadget/legacy/dbgp.c","truncated_path_level":1},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["220786696602669738420112968039916400508","58419054149626582732950653854970518386","58319612690254011723664119190774671516"]},"source":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"signature_type":"Line","signature_version":"v1","id":"ASB-A-216825460-2435716f","target":{"file":"drivers/usb/gadget/composite.c","truncated_path_level":1},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["332656553028460648197238486507283164994","184822845197430248537449464647837682435","24535556639354158768388367629306163538"]},"source":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"signature_type":"Function","signature_version":"v1","id":"ASB-A-216825460-332e6bf0","target":{"function":"dbgp_setup","file":"drivers/usb/gadget/legacy/dbgp.c","truncated_path_level":1},"deprecated":false,"digest":{"function_hash":"211557554950156766019146613511635348846","length":1417},"source":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"signature_type":"Line","signature_version":"v1","id":"ASB-A-216825460-3492eeb3","target":{"file":"drivers/usb/gadget/function/rndis.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["282852417431766263490676553128712597531","110705312730213592619630503319076438808","94219566278308689484813984906675955552","36491830421415711599610514669873140861","30790627971595482618317624871770110268","288531739672159843520527013539581497894","39603869017474101200293526634541239352","45180091331208902342353969121843865020","143434519509247879588825429509241155734"]},"source":"https://android.googlesource.com/kernel/common/+/fb4ff0f96de37"},{"signature_type":"Function","target":{"function":"composite_setup","file":"drivers/usb/gadget/composite.c","truncated_path_level":1},"id":"ASB-A-216825460-444ae947","signature_version":"v1","deprecated":false,"digest":{"function_hash":"5478919993484057482267054353714439302","length":8448},"source":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"signature_type":"Line","signature_version":"v1","id":"ASB-A-216825460-47e64c35","target":{"file":"drivers/usb/gadget/legacy/inode.c","truncated_path_level":1},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["294771366740492330844059928101261168882","329472988511519008266114862851615948738","230055354007917815238754878125146233726","241615109029172640209368064780730838459","64969316027898508467714672781279523538","30332420178214091468338430140846186405","255997175657941735343107809281305721211","128343364494571164832515145964696539800","192991251693947936407784405714326144362","63161658648569397665050629489358928343"]},"source":"https://android.googlesource.com/kernel/common/+/7193ad3e50e59"},{"signature_type":"Function","target":{"function":"rndis_set_response","file":"drivers/usb/gadget/function/rndis.c"},"id":"ASB-A-216825460-cce2960c","signature_version":"v1","deprecated":false,"digest":{"function_hash":"221946459094492974610708965816765957224","length":1018},"source":"https://android.googlesource.com/kernel/common/+/fb4ff0f96de37"}],"spl":"2022-07-05","severity":"High","fixes":["https://android.googlesource.com/kernel/common/+/7193ad3e50e59","https://android.googlesource.com/kernel/common/+/fb4ff0f96de37"],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-216825460.json"}}],"schema_version":"1.7.5"}