Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-32900 EUVD-2024-30670GHSA-pr97-pp48-gmqg

In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of pr…

Published Jun 13, 2024 · Updated Aug 19, 2024 · Assigned by Google_Devices

Description

In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_camera_default SELinux label with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References