Lucene search
GoogleOSV:ASB-A-185125206HistoryMar 01, 2022 - 12:00 a.m.
Kernel exploit: aio poll + binder heap UAF
2022-03-0100:00:00
Google
osv.dev
19
kernel
exploit
memory corruption
local privilege escalation
aio poll
binder heap uaf
software
EPSS
0
Percentile
5.1%
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
android.googlesource.com/kernel/common/+/363bee27e258
android.googlesource.com/kernel/common/+/42288cb44c4b
android.googlesource.com/kernel/common/+/50252e4b5e98
android.googlesource.com/kernel/common/+/9537bae0da1f
android.googlesource.com/kernel/common/+/a880b28a71e3
source.android.com/security/bulletin/2022-03-01
Related
cvelist
cvelist
CVE-2021-39698
2022-03-16 14:04:14
prion
prion
Memory corruption
2022-03-16 15:15:00
nvd
nvd
CVE-2021-39698
2022-03-16 15:15:10
cve
cve
CVE-2021-39698
2022-03-16 15:15:10
nessus
nessus
debiancve
debiancve
CVE-2021-39698
2022-03-16 15:15:10
redhatcve
redhatcve
CVE-2021-39698
2022-03-11 15:24:19
ubuntucve
ubuntucve
CVE-2021-39698
2022-03-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1808)
2022-06-07 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1934)
2022-06-22 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1844)
2022-06-16 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0350
2022-01-11 00:00:00
osv
osv
linux, linux-aws, linux-aws-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi vulnerabilities
2022-03-22 06:27:44
linux-azure-5.13, linux-oracle-5.13 vulnerabilities
2022-04-06 21:21:25
linux - security update
2022-03-09 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-03-30 00:00:00
Security update for the Linux Kernel (important)
2022-04-12 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-03-22 00:00:00
Linux kernel vulnerabilities
2022-04-06 00:00:00
debian
debian
[SECURITY] [DLA 2940-1] linux security update
2022-03-09 12:40:13
[SECURITY] [DLA 2941-1] linux-4.19 security update
2022-03-09 12:40:55
[SECURITY] [DSA 5096-1] linux security update
2022-03-09 15:30:58