CVE-2021-31916

In list_devices of dm-ioctl.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privil...

Original description

The description as published by the source.

In list_devices of dm-ioctl.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Android :linux_kernel:

[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-10-05"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-31916 linux Fixed in: 5.10.28-1
Ubuntu UBUNTU-CVE-2021-31916 linux-aws Fixed in: 4.4.0-1103.108

References

advisory source.android.com
patch android.googlesource.com