CVE-2021-1958: Use After Free
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2021-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1958?
The severity of CVE-2021-1958 is classified as high due to its potential to allow an attacker to exploit a race condition leading to a use after free scenario.
How do I fix CVE-2021-1958?
To address CVE-2021-1958, users should contact Qualcomm for updates or firmware patches that mitigate the vulnerability.
Which devices are affected by CVE-2021-1958?
CVE-2021-1958 affects various Qualcomm firmware and hardware components across Snapdragon Auto, Connectivity, Mobile, and Wearable products.
What type of vulnerability is CVE-2021-1958?
CVE-2021-1958 is classified as a race condition vulnerability in the fastrpc kernel driver.
Can CVE-2021-1958 lead to remote code execution?
Yes, CVE-2021-1958 can potentially enable remote code execution due to the vulnerability's nature allowing manipulation of system processes.