medium6.7
CVE-2022-20572
In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check.
Impact
In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | All versions |