CVE-2021-0936

Published: 25 October 2021

In acc_read of f_accessory.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173789633References: Upstream kernel

Notes

Author	Note
seth-arnold	Android-specific

Priority

Cvss 3 Severity Score

7.8

Score breakdown

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Not vulnerable (Android specific)
	upstream	Not vulnerable (debian: Pixel or Android-specific driver)
	xenial	Not vulnerable (Android specific)
linux-aws Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Not vulnerable (Android specific)
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-aws-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.4)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-aws-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-aws-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-aws-hwe Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-azure Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Not vulnerable (Android specific)
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-azure-4.15 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-azure-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-azure-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.4)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-azure-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-azure-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-azure-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-bluefield Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-dell300x Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gcp Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.3)
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-gcp-4.15 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gcp-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.4)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gcp-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gcp-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gcp-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.3)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gke Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Ignored (end of standard support)
linux-gke-4.15 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gke-5.0 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gke-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gke-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gkeop Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-gkeop-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-hwe Launchpad, Ubuntu, Debian	bionic	Ignored (replaced by linux-hwe-5.4)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-hwe-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-hwe-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-hwe-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-hwe-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-hwe-5.4)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Ignored (superseded by linux-hwe)
linux-ibm Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-kvm Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-lts-xenial Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	trusty	Not vulnerable (Android specific)
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oem Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Ignored (end of standard support)
linux-oem-5.10 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oem-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oem-5.6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oem-osp1 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oracle Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-oracle-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.3)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oracle-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oracle-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.4)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oracle-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-oracle-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-raspi Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Not vulnerable (Android specific)
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-raspi-5.4 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Ignored (replaced by linux-raspi)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)
linux-raspi2-5.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-riscv Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-riscv-5.8)
	hirsute	Not vulnerable (Android specific)
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-riscv-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-riscv-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (Android specific)
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Does not exist
linux-snapdragon Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android specific)
	focal	Does not exist
	hirsute	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android specific)
	xenial	Not vulnerable (Android specific)

Severity score breakdown

Parameter	Value
Base score	7.8
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›