CVE-2021-39638: Use After Free

In periodicioworkfunc of lwisperiodicio.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-39653: Undefined Security Weakness

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

CVE-2021-39644: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A...

PT-2021-22688

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible bypass of defense-in-depth due to missing validation of the return value in the ic startRetrieveEntryValue function of acropora/app/identity/ic.c. This could lead to local...

CVE-2021-1045: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A...

CVE-2021-39641: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A...

PT-2021-22696

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to an incorrect bounds check in the sec ts parsing cmds function, which could lead to a possible out of bounds write. This may result in local escalatio...

PT-2021-22689

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations: At the moment, there is no informati...

CVE-2021-1046: Out-of-bounds Read

In lwisdpmupdateclock of lwisdevicedpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

CVE-2021-39655: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A...

PT-2021-22695

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue allows access to PIN protected settings without PIN confirmation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2021-39642: Concurrent Execution using Shared Resource with Improper Synchronization

In synchronousprocessioentries of lwisioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

SUSE SLES12 Security Update : kernel (Live Patch 25 for SLE 12 SP5) (SUSE-SU-2021:4021-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4021-1 advisory. This update for the Linux Kernel 4.12.14-12298 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

CVE-2021-1043: Undefined Security Weakness

In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2021-22699

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible use-after-free due to improper locking in the configfs open file function of file.c. This could lead to local escalation of privilege in t...

PT-2021-6104

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible disclosure of kernel heap memory due to a race condition in the gadget dev desc UDC show function of configfs.c. This could lead to local...

PT-2021-22693 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible use-after-free in the regmap exit function of regmap.c due to improper locking. This could lead to local escalation of privilege in the kernel, with System execution privileges...

PT-2021-22685 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the dwc3 gadget ep0 queue function of ep0.c due to improper locking. This could lead to local escalation of privilege with no additional execution privilege...

CVE-2021-1048: Use After Free

In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

PT-2021-13373

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the quota proc write function in xt quota2.c, where uninitialized data can lead to reading kernel memory. This could result in local information disclosure, requiring System execution privileg...