CVE-2021-1048: Android Kernel Use-After-Free Vulnerability
Android kernel contains a use-after-free vulnerability that allows for privilege escalation.
Other sources
In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2021-11-06
Event History
Frequently Asked Questions
What is CVE-2021-1048?
CVE-2021-1048 is an Android kernel use-after-free vulnerability that allows for privilege escalation.
How severe is CVE-2021-1048?
CVE-2021-1048 has a severity rating of high.
How does CVE-2021-1048 affect the Android kernel?
CVE-2021-1048 affects the Android kernel by introducing a use-after-free vulnerability.
Which software is affected by CVE-2021-1048?
CVE-2021-1048 affects the Android kernel and Google Android.
How can I fix CVE-2021-1048?
To fix CVE-2021-1048, users should apply the security update provided by Android or Google.