CVE-2021-1048: Android Kernel Use-After-Free Vulnerability
In eploopcheckproc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel
Other sources
Android kernel contains a use-after-free vulnerability that allows for privilege escalation.
— CISA
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-1048?
CVE-2021-1048 is an Android kernel use-after-free vulnerability that allows for privilege escalation.
How severe is CVE-2021-1048?
CVE-2021-1048 has a severity rating of high.
How does CVE-2021-1048 affect the Android kernel?
CVE-2021-1048 affects the Android kernel by introducing a use-after-free vulnerability.
Which software is affected by CVE-2021-1048?
CVE-2021-1048 affects the Android kernel and Google Android.
How can I fix CVE-2021-1048?
To fix CVE-2021-1048, users should apply the security update provided by Android or Google.