PT-2022-1354
CVE-2021-0707
·
Published
2022-04-01
·
Updated
2022-05-16
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a possible memory corruption due to a use after free in the
dma buf release function of dma-buf.c. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Recommendations
For Android kernel, consider applying a patch from the upstream kernel to resolve the issue.
As a temporary workaround, consider restricting access to the
dma buf release function until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾