CVE-2018-21086: Race Condition

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant double free in vnswapinitbackingstorage. The Samsung ID is SVE-2017-11177 (February 2018).

Affected Software

11 affected components

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Event History

Apr 8, 2020

CVE Published

via MITRE·02:45 PM

Data Sourced

via MITRE·02:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21086?

CVE-2018-21086 has a moderate severity due to the potential for a race condition leading to a double free in affected devices.

How do I fix CVE-2018-21086?

To fix CVE-2018-21086, you should update your Samsung mobile device to the latest security patch provided by the manufacturer.

Which devices are affected by CVE-2018-21086?

CVE-2018-21086 affects various Samsung mobile devices running Android versions Lollipop (5.x), Marshmallow (6.0), and Nougat (7.x).

What is a race condition in the context of CVE-2018-21086?

In the context of CVE-2018-21086, a race condition occurs when two processes attempt to access and modify shared resource memory simultaneously, potentially leading to instability.

Is CVE-2018-21086 exploitable remotely?

CVE-2018-21086 is not explicitly stated to be remotely exploitable, but the vulnerability could potentially allow an attacker to affect device memory management.