CVE-2023-22436

Publication date

2023-03-10 10:44:55

Family

OpenHarmony

State

PUBLISHED

Description

The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.