CVE-2022-20009: 
Linux Ubuntu vulnerability analysis and mitigation

A vulnerability in the USB gadget subsystem of the Android kernel was identified and tracked as CVE-2022-20009. The issue was discovered and reported through Android's security program, with the vulnerability being publicly disclosed in the May 2022 Android Security Bulletin. This vulnerability affects various versions of the Android kernel (Android Bulletin).

The vulnerability stems from a missing bounds check in various functions of the USB gadget subsystem, which could potentially lead to an out-of-bounds write condition. The issue was assigned Android ID A-213172319 and was deemed significant enough to warrant inclusion in the Android security updates (CVE Mitre).

The vulnerability could potentially enable local escalation of privilege on affected Android devices. Notably, the exploitation does not require additional execution privileges or user interaction to be successful (CVE Mitre).

The vulnerability was addressed in the May 2022 Android Security Bulletin. Users are advised to update their Android devices to the latest available security patch level to protect against this vulnerability (Android Bulletin).