CVE-2021-39698: Use After Free

Q: What is the severity of CVE-2021-39698?

CVE-2021-39698 is classified as a high-severity vulnerability due to its potential for local privilege escalation.

Q: How do I fix CVE-2021-39698?

To fix CVE-2021-39698, update to the recommended kernel versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.

Q: What is the impact of CVE-2021-39698?

The impact of CVE-2021-39698 includes memory corruption that can lead to local escalation of privileges without requiring user interaction.

Q: Which systems are affected by CVE-2021-39698?

CVE-2021-39698 affects the Android kernel across multiple versions.

Q: Is user interaction required to exploit CVE-2021-39698?

No, user interaction is not needed for exploiting CVE-2021-39698.

Published Mar 1, 2022

Updated

In aiopollcompletework of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

4 affected componentsFixes available

Google Android

android/:linux_kernel:>=:0<:2022-03-05

:2022-03-05

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Upgrade
Upgrade android/:linux_kernel: to a version that resolves this vulnerability.
Fixed in :2022-03-05

Event History

Mar 1, 2022

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Mar 7, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Mar 16, 2022

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

DSA-5096

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2021-39698?

CVE-2021-39698 is classified as a high-severity vulnerability due to its potential for local privilege escalation.

How do I fix CVE-2021-39698?

To fix CVE-2021-39698, update to the recommended kernel versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.

What is the impact of CVE-2021-39698?

The impact of CVE-2021-39698 includes memory corruption that can lead to local escalation of privileges without requiring user interaction.

Which systems are affected by CVE-2021-39698?

CVE-2021-39698 affects the Android kernel across multiple versions.

Is user interaction required to exploit CVE-2021-39698?

No, user interaction is not needed for exploiting CVE-2021-39698.

CVE-2021-39698: Use After Free

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2021-39698?

How do I fix CVE-2021-39698?

What is the impact of CVE-2021-39698?

Which systems are affected by CVE-2021-39698?

Is user interaction required to exploit CVE-2021-39698?

Company

Resources

Contact