In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161010552References: Upstream kernel
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2022-03-16T14:04:03
Updated: 2024-08-04T02:20:33.243Z
Reserved: 2021-08-23T00:00:00
Link: CVE-2021-39792
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-03-16T15:15:12.390
Modified: 2022-07-12T17:42:04.277
Link: CVE-2021-39792
Redhat
No data.