| Name | CVE-2021-0920 |
| Description | In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-2843-1 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| linux (PTS) | bullseye | 5.10.223-1 | fixed |
| bullseye (security) | 5.10.237-1 | fixed | |
| bookworm | 6.1.137-1 | fixed | |
| bookworm (security) | 6.1.140-1 | fixed | |
| trixie | 6.12.30-1 | fixed | |
| sid | 6.12.32-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| linux | source | stretch | 4.9.290-1 | DLA-2843-1 | ||
| linux | source | buster | 4.19.208-1 | |||
| linux | source | bullseye | 5.10.70-1 | |||
| linux | source | (unstable) | 5.14.6-1 |
https://git.kernel.org/linus/cbcf01128d0a92e131bd09f1688fe032480b65ca
https://source.android.com/security/bulletin/2021-11-01
https://googleprojectzero.blogspot.com/2022/08/the-quantum-state-of-linux-kernel.html
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-0920.html