What is GHSA-c553-7q8c-vqg8?

GHSA-c553-7q8c-vqg8 is a security advisory published by GitHub Security Advisories with Medium severity. In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to...

Which CVE IDs does GHSA-c553-7q8c-vqg8 cover?

GHSA-c553-7q8c-vqg8 covers the following CVE IDs: CVE-2022-20572. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c553-7q8c-vqg8?

GHSA-c553-7q8c-vqg8 has a CVSS v3 base score of 6.7, published by GitHub Security Advisories.

GHSA-c553-7q8c-vqg8MediumCVSS 6.7

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to...

Vendor

GitHub Security Advisories

Published

December 21, 2022

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2022-20572 →

📋 Description

In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-20572
https://source.android.com/security/bulletin/pixel/2022-12-01
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://github.com/advisories/GHSA-c553-7q8c-vqg8