CVE-2021-39800

In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free

published April 12, 2022

CVSS
—
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208277166References: Upstream kernel

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.8th percentile
Published
2022-04-12T16:11Z
EPSS history
Timeline
  • 12 APR 16:11Z
    In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free
    cvelistv5