In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2021-11-01 | Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html | Third Party Advisory |
Information
Published : 2021-12-15 11:15
Updated : 2022-07-12 10:42
NVD link : CVE-2021-0920
Mitre link : CVE-2021-0920
JSON object : View
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Products Affected
debian
- debian_linux
- android