{"id":"PUB-A-234030265","details":"In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-234030265","CVE-2022-20571"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/668e043112528306813bde9213eba6171ce48223"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-12-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/668e043112528306813bde9213eba6171ce48223","target":{"file":"drivers/md/dm-android-verity.c"},"deprecated":false,"digest":{"line_hashes":["43333637226151334257252338418709366095","85145099847236252700600604943492588310","261493982372989962275557228004560849061","143388858974708953349836310361204602284","53055355912584744486549868783119292344","101338858360341059444055511594453887302","152241397047631096954652458994620177503","2410884912029271408058525962777913465","338327221067136956231394034595193366283","109405429697477510143640803960923268678","239431760680267861408215911484414930880","113485786908021992668113637231176756422","308898873564854512691811040027443968926","267471331716797404320403368007895714041","232295672164360345511814312781872181884","188511308032534683327967335951312579236"],"threshold":0.9},"id":"PUB-A-234030265-78cd1ee7","signature_type":"Line"},{"digest":{"function_hash":"77016691559962788528988028336526544098","length":4286},"id":"PUB-A-234030265-7bdac8a8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/668e043112528306813bde9213eba6171ce48223","target":{"file":"drivers/md/dm-android-verity.c","function":"android_verity_ctr"},"deprecated":false}],"fixes":["https://android.googlesource.com/kernel/common/+/668e043112528306813bde9213eba6171ce48223"],"severity":"Moderate","spl":"2022-12-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-234030265.json"}}],"schema_version":"1.9.0"}