CVE-2022-47465: 
NixOS vulnerability analysis and mitigation

In vdsp service, there is a missing permission check vulnerability identified as CVE-2022-47465. The vulnerability was discovered in the vdsp service and affects various UNISOC hardware platforms including S8000, SC7731E, SC9832E, SC9863A, T310, T606, T610, T612, T616, T618, T760, T770, T820, as well as Android versions 10.0 through 13.0 (NVD).

The vulnerability is characterized by a missing permission check in the vdsp service, which has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified as a NULL Pointer Dereference (CWE-476) issue (NVD).

If exploited, this vulnerability could lead to local denial of service in the vdsp service, potentially affecting system stability and availability (NVD).

The vulnerability requires local access with low privileges and no user interaction for exploitation. The attack complexity is rated as low, indicating relatively straightforward exploitation conditions (NVD).

UNISOC has released an advisory regarding this vulnerability. Users and administrators should refer to the vendor's security advisory for specific mitigation steps and updates (Vendor Advisory).