CVE-2021-0920

Timeline

Detection, updates, and resolution for this record.

1. Dec 15, 2021 · Catalog

   Detected

   In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

2. May 23, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Jun 13, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

Affected

• cpe debian/debian linux9.0
• cpe google/androidversion unspecified
• cpe linux/linux kernelversion unspecified
• cpe linux/linux kernel5.14
• vendor Android Kernelversion unspecified

Sources

• CISA KEVCVE-2021-0920

  Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.

  cisa.gov
• CVE.orgCVE-2021-0920

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-0920

  30-day exploitation probability 0.9%

  first.org
• NIST NVDCVE-2021-0920

  In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro

  nvd.nist.gov

References

• Mailing List · lists.debian.org
• CISA note · nvd.nist.gov
• Vendor Advisory · source.android.com
• Third Party Advisory · cisa.gov