CVE-2022-47331: Race Condition
A race condition Use After Freee issue in unisoc sprd sdiohaldebug driver, which may cause EoP problem.
Other sources
A wlan driver function lacks parameter checks, resulting Out-of-bounds Write issues.
— OSV
In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-12-05 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-02-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47331?
CVE-2022-47331 is classified as a local denial of service vulnerability in wlan services.
How do I fix CVE-2022-47331?
To fix CVE-2022-47331, update your Android device to the latest version provided by Google.
Which Android versions are affected by CVE-2022-47331?
CVE-2022-47331 affects Android versions 10.0 and 11.0.
What can be the impact of CVE-2022-47331?
The impact of CVE-2022-47331 is a potential local denial of service that can disrupt wlan services.
Are Unisoc devices vulnerable to CVE-2022-47331?
No, the Unisoc devices listed are not vulnerable to CVE-2022-47331.