CVE-2021-0920

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

Affected products

Almalinux, Android Kernel, Astra Linux, Centos, Red Hat, Rocky Linux, Suse, Ubuntu

Linux Linux Kernel

≤ 5.13, 5.14

CVSS 2.0

6.9 MEDIUM

CVSS 3.1

6.4 MEDIUM

EPSS

0.9% (56th percentile)

Weakness

CWE-416, CWE-362

NVD status

Analyzed

Published

2021-12-15