CVE-2022-20409

In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238177383References: Upstream kernel

• CWE-416

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2ee0cab11f6626071f8a64c7792406dabdd94c8dMailing List, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2022-10-01Patch, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2ee0cab11f6626071f8a64c7792406dabdd94c8dMailing List, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2022-10-01Patch, Vendor Advisory

Published

Oct 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20403Product: AndroidVersions: Android kernelAndroid ID: A-207975…9.8
• CVE-2022-20404Product: AndroidVersions: Android kernelAndroid ID: A-205714…7.5
• CVE-2022-20405Product: AndroidVersions: Android kernelAndroid ID: A-216363…9.8
• CVE-2022-20406Product: AndroidVersions: Android kernelAndroid ID: A-184676…7.5
• CVE-2022-20407Product: AndroidVersions: Android kernelAndroid ID: A-210916…7.5
• CVE-2022-20408Product: AndroidVersions: Android kernelAndroid ID: A-204782…7.5
• CVE-2022-2041The Brizy WordPress plugin before 2.4.2 does not sanitise an…5.4
• CVE-2022-20410In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a …7.5
• CVE-2022-20411In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of…8.8
• CVE-2022-20412In fdt_next_tag of fdt.c, there is a possible out of bounds …6.7
• CVE-2022-20413In start of Threads.cpp, there is a possible way to record a…5.5
• CVE-2022-20414In setImpl of AlarmManagerService.java, there is a possible …5.5