CVE-2021-1048

Timeline

Detection, updates, and resolution for this record.

1. Dec 15, 2021 · Catalog

   Detected

   In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel

2. May 23, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Jun 13, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel

Affected

• cpe google/androidversion unspecified
• vendor Android Kernelversion unspecified

Sources

• CISA KEVCVE-2021-1048

  Android kernel contains a use-after-free vulnerability that allows for privilege escalation.

  cisa.gov
• CVE.orgCVE-2021-1048

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-1048

  30-day exploitation probability 1.0%

  first.org
• NIST NVDCVE-2021-1048

  In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andr

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Patch · source.android.com
• Third Party Advisory · cisa.gov