Authored by Jann Horn, Google Security Research

On Mali devices without the new CSF interface, IMPORTED_USER_BUF is released without flushing host-side VMAs, leading to a page use-after-free vulnerability.

advisories | CVE-2022-36449

RELATED ARTICLESMORE FROM AUTHOR