CVE-2021-0920

6.4
MEDIUMCVSS v3.1 Base Score
0.82%
LOW RiskEPSS (56th percentile)
KEV
CWE-362CWE-416

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

Published: 12/15/2021
Modified: 6/17/2026
Back to CVE Lookup

ACTIVELY EXPLOITED IN THE WILD

This vulnerability is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Vulnerability Name:

Android Kernel Race Condition Vulnerability

Vendor / Product:

Android Kernel

Required Action:

Apply updates per vendor instructions.

Due Date: 6/13/2022(OVERDUE)
Added to KEV:

5/23/2022

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2021-0920

View CISA KEV Catalog

Vulnerability Summary

CVSS v3 Score

6.4MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2 Score

6.9

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS Score (Exploitation Probability)

0.82%LOW Exploitation Risk
56th percentile

This vulnerability has a 0.82% probability of being exploited in the next 30 days, ranking higher than 56% of all scored CVEs.

CWE Classification

CWE-362CWE-416

Learn More

CVSS Calculator

View this score breakdown or calculate a custom score

Understanding CVSS Scoring

Learn how severity scores are calculated and what they mean

CVE Prioritization Guide

Best practices for deciding which vulnerabilities to address first

What is a CVE?

Essential guide to Common Vulnerabilities and Exposures

Advertisement