CVE-2022-20478

What it actually does

In NotificationChannel of NotificationChannel.java, resource exhaustion prevents persistence of permissions settings, enabling local privilege escalation without additional privileges or user interaction.

Why it matters to the business

Local attackers can gain elevated access on affected devices, increasing risk of unauthorized control and data exposure across widely deployed Android versions.

How an attack unfolds

An attacker with local access triggers resource exhaustion in notification channel handling to cause failure to persist permission settings, resulting in privilege escalation on the device.

How to fix it

Upgrade affected Android versions to patched releases; apply GitLab fixes where applicable in af6735ad95ff7a4578c8548d37ce9e8247385d5e and 81f47cb467e3387cea11b909ea6b977e28b3b4d2.

How to confirm the fix worked

Verify device is running a patched Android build and confirm notification permission settings persist correctly under resource pressure.

Typical attack path

1. Obtain local access to the Android device
2. Trigger resource exhaustion condition in NotificationChannel
3. Exploit failure to persist permissions settings
4. Achieve local privilege escalation

How to detect it

Review Android system logs for notification channel errors or permission persistence failures; check for unexpected privilege changes post-exploitation attempts.

What your security team should do

• Prioritize patching Android devices to versions beyond 13 where possible
• Monitor for local privilege escalation attempts in device logs
• Apply listed GitLab commit fixes if GitLab components are in use