CVE-2022-20153

In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel

• CWE-667

• https://source.android.com/security/bulletin/pixel/2022-06-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2022-06-01Vendor Advisory

Published

Jun 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20147In nfa_dm_check_set_config of nfa_dm_main.cc, there is a pos…7.8
• CVE-2022-20148In TBD of TBD, there is a possible use-after-free due to a r…6.4
• CVE-2022-20149Product: AndroidVersions: Android kernelAndroid ID: A-211685…7.5
• CVE-2022-2015Cross-site Scripting (XSS) - Stored in GitHub repository jgr…5.4
• CVE-2022-20151Product: AndroidVersions: Android kernelAndroid ID: A-210712…7.5
• CVE-2022-20152In the TitanM chip, there is a possible out of bounds write …6.7
• CVE-2022-20154In lock_sock_nested of sock.c, there is a possible use after…6.4
• CVE-2022-20155In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-…7
• CVE-2022-20156In unflatten of GraphicBuffer.cpp, there is a possible arbit…7.8
• CVE-2022-20158In bdi_put and bdi_unregister of backing-dev.c, there is a p…6.7
• CVE-2022-20159In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, ther…4.4
• CVE-2022-2016Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4