What is the severity of CVE-2018-21086?

CVE-2018-21086 has a moderate severity due to the potential for a race condition leading to a double free in affected devices.

How do I fix CVE-2018-21086?

To fix CVE-2018-21086, you should update your Samsung mobile device to the latest security patch provided by the manufacturer.

Which devices are affected by CVE-2018-21086?

CVE-2018-21086 affects various Samsung mobile devices running Android versions Lollipop (5.x), Marshmallow (6.0), and Nougat (7.x).

What is a race condition in the context of CVE-2018-21086?

In the context of CVE-2018-21086, a race condition occurs when two processes attempt to access and modify shared resource memory simultaneously, potentially leading to instability.

Is CVE-2018-21086 exploitable remotely?

CVE-2018-21086 is not explicitly stated to be remotely exploitable, but the vulnerability could potentially allow an attacker to affect device memory management.

Vulnerability/
CVE-2018-21086

high

8.1

CWE

362 415

8/4/2020

5/8/2024

CVE-2018-21086: Race Condition

First published: Wed Apr 08 2020(Updated: )

An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant double free in vnswap_init_backing_storage. The Samsung ID is SVE-2017-11177 (February 2018).

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Android	=5.0
Android	=5.0.1
Android	=5.0.2
Android	=5.1
Android	=5.1.0
Android	=5.1.1
Android	=6.0
Android	=7.0
Android	=7.1.0
Android	=7.1.1
Android	=7.1.2

Never miss a vulnerability like this again

Reference Links

https://security.samsungmobile.com/securityUpdate.smsb

Frequently Asked Questions

What is the severity of CVE-2018-21086?
CVE-2018-21086 has a moderate severity due to the potential for a race condition leading to a double free in affected devices.
How do I fix CVE-2018-21086?
To fix CVE-2018-21086, you should update your Samsung mobile device to the latest security patch provided by the manufacturer.
Which devices are affected by CVE-2018-21086?
CVE-2018-21086 affects various Samsung mobile devices running Android versions Lollipop (5.x), Marshmallow (6.0), and Nougat (7.x).
What is a race condition in the context of CVE-2018-21086?
In the context of CVE-2018-21086, a race condition occurs when two processes attempt to access and modify shared resource memory simultaneously, potentially leading to instability.
Is CVE-2018-21086 exploitable remotely?
CVE-2018-21086 is not explicitly stated to be remotely exploitable, but the vulnerability could potentially allow an attacker to affect device memory management.

agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/severity
agent/last-modified-date
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/google
canonical/android
version/android/5.0
version/android/5.0.1
version/android/5.0.2
version/android/5.1
version/android/5.1.0
version/android/5.1.1
version/android/6.0
version/android/7.0
version/android/7.1.0
version/android/7.1.1
version/android/7.1.2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.