Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-22436

The kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenHarmony

Description

The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenHarmony OpenHarmony

Default version status: unaffected

  • 3.1 to ≤ 3.1.5affected

References