PT-2021-1517 · Google+7 · Android Kernel+7
Published
2021-07-28
·
Updated
2026-02-27
·
CVE-2021-0920
CVSS v2.0
6.9
Medium
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is caused by a race condition in the unix scm to skb function of af unix.c, leading to a possible use after free bug. This could result in local escalation of privilege with System execution privileges needed. User interaction is not required for exploitation. The vulnerability has been used for Android exploitation in the wild.
Recommendations
For Android kernel, consider applying the fix for the race condition in the unix scm to skb function of af unix.c to prevent local escalation of privilege.
As a temporary workaround, consider restricting access to the vulnerable function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Race Condition
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Android Kernel
Astra Linux
Centos
Red Hat
Rocky Linux
Suse
Ubuntu