CVE-2021-25370

CVE Published 2021-03-26
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) google
Related Product(s) android
Exploitation Reported (CISA KEV) 2022-11-08
CVSS 3 Base Score 4.4 (MEDIUM)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References