CVE-2018-21085: Use After Free

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant use-after-free in vnswapdeinitbackingstorage. The Samsung ID is SVE-2017-11176 (February 2018).

Affected Software

11 affected components

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Event History

Apr 8, 2020

CVE Published

via MITRE·02:45 PM

Data Sourced

via MITRE·02:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21085?

CVE-2018-21085 has been classified as a high-severity vulnerability due to the potential for use-after-free exploitation.

How do I fix CVE-2018-21085?

To fix CVE-2018-21085, it is recommended to update your Samsung mobile device to the latest software version provided by the manufacturer.

Which devices are affected by CVE-2018-21085?

CVE-2018-21085 affects Samsung mobile devices running Android versions L(5.x), M(6.0), and N(7.x).

What is the cause of CVE-2018-21085?

CVE-2018-21085 is caused by a race condition leading to a use-after-free vulnerability in the vnswap_deinit_backing_storage function.

Is there an exploit for CVE-2018-21085?

While specific exploits for CVE-2018-21085 have not been publicly disclosed, the nature of the vulnerability raises significant security concerns.