In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel
https://source.android.com/security/bulletin/pixel/2022-12-01
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25826
https://cert-portal.siemens.com/productcert/html/ssa-794697.html