CVE-2022-20154

CVE-2022-20154 describes a use-after-free vulnerability in the Android kernel's sock.c, specifically within the lock_sock_nested function, caused by a race condition. This flaw could enable a local attacker with System execution privileges to achieve escalation of privilege on affected Android devices. The vulnerability carries a CVSS score of 6.4 (Medium), indicating a local attack vector with high attack complexity, but no user interaction is required. A successful exploit could lead to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and a lack of widespread attention.