{"id":"PUB-A-223230190","aliases":["3075470","A-223230190","CVE-2022-25654"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2022-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-09-01"},{"type":"FIX","url":"https://source.codeaurora.org/quic/qsdk/oss/kernel/linux-msm/commit/?id=940ac530d84408d1ec308c16ac777334c722fc91"}],"affected":[{"package":{"name":"oss/kernel/linux-msm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2022-09-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"severity":"Moderate","spl":"2022-09-05","types":["Unknown"],"vanir_signatures":[{"digest":{"line_hashes":["91474951806476305326073091052162404899","193481546916222508122340266584735058488","149284105016960754328263627268962905760","326922172916052769820424876170845981467","321679504413055376665169770292381140398","225657580958095478682368477785472231948","120911606879902435654107404701093314073","208733944882377920533103706569846644407","111480949054434572127327962756223293243","246790059700176505341879495818201555217","44689050813154569098833240373556007018","133407236221917069762820748114240984359","202623261041358754512567527055856030228","151210409240886791890039534115138846158","147028250212817804629912196452707843237","193818161589885383072238550531738515648","312141252658018514512597085728573223431","39933199405616609427850207735635079509","324522733036148109420495170129451980619"],"threshold":0.9},"id":"PUB-A-223230190-1c4ed635","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/qsdk/oss/kernel/linux-msm/commit/940ac530d84408d1ec308c16ac777334c722fc91","target":{"file":"drivers/staging/android/ion/msm/msm_ion.c"},"deprecated":false},{"digest":{"length":358,"function_hash":"242812387285193866839187953654134636641"},"id":"PUB-A-223230190-4df1fc30","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/qsdk/oss/kernel/linux-msm/commit/940ac530d84408d1ec308c16ac777334c722fc91","target":{"function":"check_vaddr_bounds","file":"drivers/staging/android/ion/msm/msm_ion.c"},"deprecated":false},{"id":"PUB-A-223230190-c958a42e","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/qsdk/oss/kernel/linux-msm/commit/940ac530d84408d1ec308c16ac777334c722fc91","target":{"file":"drivers/staging/android/ion/msm/msm_ion.c","function":"msm_ion_custom_ioctl"},"deprecated":false,"digest":{"length":2495,"function_hash":"153997691334431216944399445664272831048"}}],"fixes":["https://source.codeaurora.org/quic/qsdk/oss/kernel/linux-msm/commit/?id=940ac530d84408d1ec308c16ac777334c722fc91"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-223230190.json"}}],"schema_version":"1.9.0"}