Use-after-free Vulnerability in Linux Kernel Binder Component

CVE-2022-49939

What is CVE-2022-49939?

A use-after-free vulnerability exists in the Linux kernel's binder component due to a race condition during weak handle transactions. When a transaction of type BINDER_TYPE_WEAK_HANDLE fails to increment the reference for a node while the target process is concurrently closing, it can lead to a dangling pointer. Subsequently, if the process is released and attempts to lock a previously valid reference, it results in an unsafe memory access. This vulnerability could compromise the stability of the system and lead to unexpected behavior.

References