CVE-2021-3491

In io_add_buffers of io_uring.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv...

Original description

The description as published by the source.

In io_add_buffers of io_uring.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Android :linux_kernel:

[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-09-05"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-3491 linux Fixed in: 5.10.38-1

References

advisory source.android.com
patch android.googlesource.com