PUB-A-213172369

See a problem?
Import Source
https://storage.googleapis.com/android-osv-test/PUB-A-213172369.json
JSON Data
https://api.test.osv.dev/v1/vulns/PUB-A-213172369
Aliases
Published
2022-06-01T00:00:00Z
Modified
2026-03-11T06:36:40Z
Summary
[none]
Details

In legacy_parse_param of fs_context.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2022-06-05

Affected versions

Other
Kernel

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/kernel/common/+/a32e89883a535",
        "https://android.googlesource.com/kernel/common/+/eadde287a62e6"
    ],
    "severity":  "Moderate",
    "spl":  "2022-06-05",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "332611879140404434690152632347982780701",
                    "193005555054335394959908412522152239921",
                    "308843018842959193664841224512432202885",
                    "251322244919373171567936309461685841974"
                ],
                "threshold":  0.9
            },
            "id":  "PUB-A-213172369-44cea301",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/a32e89883a535",
            "target":  {
                "file":  "fs/fs_context.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "67543043462929298139978757926468672210",
                "length":  1796
            },
            "id":  "PUB-A-213172369-4d2f18b1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/a32e89883a535",
            "target":  {
                "file":  "fs/fs_context.c",
                "function":  "legacy_parse_param"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "332611879140404434690152632347982780701",
                    "193005555054335394959908412522152239921",
                    "308843018842959193664841224512432202885",
                    "251322244919373171567936309461685841974"
                ],
                "threshold":  0.9
            },
            "id":  "PUB-A-213172369-a492c0a0",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/eadde287a62e6",
            "target":  {
                "file":  "fs/fs_context.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "67543043462929298139978757926468672210",
                "length":  1796
            },
            "id":  "PUB-A-213172369-aad49fbf",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/eadde287a62e6",
            "target":  {
                "file":  "fs/fs_context.c",
                "function":  "legacy_parse_param"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv-test/PUB-A-213172369.json"