PT-2021-22693 · Google · Android Kernel

Published 2021-12-15 · Updated 2023-08-08 · CVE-2021-39649

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Android kernel

Description: The issue is related to a possible use-after-free in the regmap exit function of regmap.c due to improper locking. This could lead to local escalation of privilege in the kernel, with System execution privileges needed. User interaction is not required for exploitation.

Recommendations: For Android kernel, consider applying a patch that properly implements locking in the regmap exit function to prevent use-after-free conditions. As a temporary workaround, restrict access to the regmap exit function until a patch is available.

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2021-39649

Affected Products

Android Kernel

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2021-39649 · Security Note
• https://source.android.com/security/bulletin/pixel/2021-12-01 · Vendor Advisory