CVE-2021-39649: Improper Locking

In regmapexit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2021-22687

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: In the synchronous process io entries function of lwis ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with...

PT-2021-22682

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible out of bounds write due to a use after free in the periodic io work func of lwis periodic io.c. This could lead to local escalation of...

CVE-2021-39646: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A...

CVE-2021-39657: Out-of-bounds Read

In ufshcdehdeviceresethandler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

CVE-2021-0920: Concurrent Execution using Shared Resource with Improper Synchronization

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2021-6106

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds read in the ufshcd eh device reset handler function of ufshcd.c due to a missing bounds check. This could lead to local...

SUSE SLES12: kernel-livepatch-4_12_14-150_75-default / etc (SUSE-SU-2021:4038-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4038-1 advisory. This update for the Linux Kernel 4.12.14-12291 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

SUSE SLES12 Security Update : kernel (Live Patch 25 for SLE 12 SP5) (SUSE-SU-2021:4021-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4021-1 advisory. This update for the Linux Kernel 4.12.14-12298 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

CVE-2021-1041: Out-of-bounds Read

In TBD of TBD, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182950799References...

CVE-2021-1042: Use After Free

In dsipaneldebugfsreadcmdset of dsipanel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...

CVE-2021-0929: Use After Free

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2021-1520

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to the USB gadget subsystem of the Linux kernel, which provides a software interface for creating client USB devices and simulating USB devices. It involv...

PT-2021-1514

Name of the Vulnerable Software and Affected Versions Linux kernel versions affected versions not specified Android kernel versions affected versions not specified Description The issue is related to a use after free memory corruption in the kernel/sched/wait.c component of the Linux operating...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write in periodicioworkfunc in lwisperiodicio.c due to reuse after release. An attacker can exploit...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google. A vulnerability exists in the Google Android Kernel for a race condition issue. The vulnerability stems from an out-of-bounds write due to a race condition in synchronousprocessioentries in lwisioctl.c. The vulnerability ca...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Kernel in Google Android. The vulnerability stems from a mis-locked configfsopenfile in file.c that is reused after release. An attacker with system execution privileges cou...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write due to improper locking in the dwc3gadgetep0queue of ep0.c. An attacker could use this...

Android kernel binderTransaction Privilege Escalation

The vulnerability in the implementation of the binderTransaction function in Android operating system kernels relates to the execution of write operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

OESA-2021-1433 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packe...