PT-2020-7003 · Google+1 · Android Kernel+1

Published 2020-11-13 · Updated 2021-11-19 · CVE-2021-0938

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to the use of uninitialized data in the memzero explicit function of compiler-clang.h, which could lead to a bypass of defense in depth. This might result in local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android kernel, consider applying the upstream kernel fix to resolve the issue. As a temporary workaround, restrict access to sensitive data to minimize the risk of information disclosure until a patch is available.

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2025-00832

CVE-2021-0938

OESA-2021-1433

Affected Products

Android Kernel

Astra Linux

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2021-3772 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0938 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-0938 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0938 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00832 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-0938 · Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2021-10-01 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-0938 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1433 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-0938 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-0938 · Security Note
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1433 · Note
• https://linuxkernelcves.com/cves/CVE-2021-0938 · Note
• https://git.kernel.org/linus/3347acc6fcd4ee71ad18a9ff9d9dac176b517329 · Note