CVE-2022-20132

Published: 15 June 2022

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

From the Ubuntu Security Team

It was discovered that the HID subsystem in the Linux kernel did not properly validate inputs in certain conditions. A local attacker with physical access could plug in a specially crafted USB device to expose sensitive information.

Notes

requires malicious USB devices to be inserted.
according to google, the following commits may also be
needed, that clean up missing Kconfig dependencies on USB_HID that
may cause build failures when incorporating the identified fixing
commits:
30cb3c2ad24b66fb7639a6d1f4390c74d6e68f94
d080811f27936f712f619f847389f403ac873b8f
f237d9028f844a86955fc9da59d7ac4a5c55d7d5

Status

Severity score breakdown

References

• https://source.android.com/security/bulletin/2022-06-01
• https://ubuntu.com/security/notices/USN-6001-1
• https://ubuntu.com/security/notices/USN-6013-1
• https://ubuntu.com/security/notices/USN-6014-1
• https://www.cve.org/CVERecord?id=CVE-2022-20132
• NVD
• Launchpad
• Debian