Local privilege escalation via mnh_sm integer overflow

Heap overflow in the Android Kernel mnh_sm driver allows local users to gain elevated privileges by triggering an integer overflow. Multiple functions in mnh-sm.c fail to prevent integer overflow, which causes a heap overflow; Google has not disclosed the individual functions or input path. A local user needs no additional execution privileges, and exploitation requires no user interaction; successful exploitation raises privileges.