CVE-2021-39698: Kernel exploit: aio poll + binder heap UAF
Summary
CVE-2021-39698: In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. Affects :linux_kernel: versions >= :0, < :2022-03-05. Fixed in :2022-03-05. How to fix ↓
Also tracked for
- linux · Debian:11
The same CVE-2021-39698 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is the Linux kernel in the Android ecosystem. The Linux kernel is the core component of the operating system that manages system resources and provides essential functionality. It is responsible for handling hardware interactions, process management, and security. The vulnerability in question arises from a use-after-free memory corruption issue in the aio_poll_complete_work function of aio.c. This vulnerability can be exploited locally to escalate privileges without requiring additional execution privileges. It is important to note that user interaction is not necessary for exploitation.
Vulnerability Detail
The vulnerability, identified as CVE-2021-39698, is a use-after-free memory corruption issue in the aio_poll_complete_work function of aio.c. This vulnerability can be exploited locally, allowing an attacker to escalate privileges without needing additional execution privileges. The root cause of the vulnerability is a failure to properly handle memory deallocation, leading to a situation where memory is accessed after it has been freed. This can result in memory corruption and potentially allow an attacker to execute arbitrary code or modify critical system data. The impact of this vulnerability is significant, as it can provide an attacker with elevated privileges and the ability to compromise the integrity and confidentiality of the affected system.
How To Fix
Minimum fixed version
:2022-03-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the provided fixes to address the issue.
Conclusion
In conclusion, the CVE-2021-39698 vulnerability in the Linux kernel in the Android ecosystem is a critical issue that can be exploited locally to escalate privileges. It is crucial to apply the provided fixes and keep the system up to date with security updates to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for :linux_kernel: →
FAQ
This vulnerability allows an attacker to escalate privileges locally, potentially gaining unauthorized access to sensitive system resources and compromising the integrity and confidentiality of the affected system.
No, user interaction is not needed for exploitation of this vulnerability.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
It is recommended to apply the provided fixes for the Android ecosystem and keep the system up to date with security updates.
For more information about this vulnerability, you can refer to the source provided in the database_specific section of the vulnerability details: https://storage.googleapis.com/android-osv/ASB-A-185125206.json
References
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
