CVE-2021-25370

CVE Published 2021-03-26
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) google
Related Product(s) android
Exploitation Reported (CISA KEV) 2022-11-08
CVSS 3 Base Score 6.1 (MEDIUM)
CVSS 3 Attack Complexity HIGH
CVSS 3 Attack Vector PHYSICAL

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References