Security Advisory

CVE-2023-22436

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-10 10:44:55

Last updated 2025-03-04 21:18:11

Assigner OpenHarmony

CVSS score 7.8

State PUBLISHED

Description

The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

← Browse all CVEs View on cve.org ↗