In hsofreenet_device of net/usb/hso.c, there is a possible use after free bug. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2022-03-05",
"types": [
"EoP"
],
"vanir_signatures": [
{
"id": "PUB-A-195082947-94280cbc",
"digest": {
"length": 1671.0,
"function_hash": "298137499518198046083903344143831194390"
},
"deprecated": false,
"target": {
"file": "drivers/net/usb/hso.c",
"function": "hso_create_net_device"
},
"source": "https://android.googlesource.com/kernel/common/+/b10dd066ea063",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "PUB-A-195082947-b195268e",
"digest": {
"line_hashes": [
"156282893777389539489004679344848890106",
"225117206975891230219727731613576980352",
"130233698345843230676753961208034863234",
"126929904214987551869022099334461746031",
"110077989494485997144708421745799580075",
"168318541572538511115501495027413516383",
"96587662042684001300105669062687269366",
"36447792687420169932546913197071659198",
"145583491195242609389987204402006427302",
"267093625285464366181271664894917707801",
"291698062750314684977066088732659534393"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/net/usb/hso.c"
},
"source": "https://android.googlesource.com/kernel/common/+/b10dd066ea063",
"signature_type": "Line",
"signature_version": "v1"
}
],
"severity": "Moderate",
"fixes": [
"https://android.googlesource.com/kernel/common/+/88b912e02d75b",
"https://android.googlesource.com/kernel/common/+/b10dd066ea063"
]
}