{"schema_version":"1.9.0","id":"ASB-A-196926917","published":"2021-11-01T00:00:00Z","modified":"2026-09-08T15:39:03.104189951Z","aliases":["A-196926917","CVE-2021-0920"],"details":"In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-11-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/cbcf01128d0a92e131bd09f1688fe032480b65ca"],"severity":"High","spl":"2021-11-05","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["317645370177825904117873425656913577228","23828740084025546938029917959519242808","17269500315359691155487481734165125553","205518783801997791516617245688006293375","126356142158529450982823959694424517468","44555724291630707007541518954774462457","49331023050186846796322229840320377836","94483555152327774149700679998842424920","285055582276144316951777175994396485683","61015202346409625043268567667128470858","319719393801817372111466737393311031907"],"threshold":0.9},"id":"ASB-A-196926917-515bd5b5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/cbcf01128d0a92e131bd09f1688fe032480b65ca","target":{"file":"net/unix/af_unix.c"}},{"deprecated":false,"digest":{"function_hash":"153461108373016994627573252914252607553","length":3152},"id":"ASB-A-196926917-d9513ecd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/cbcf01128d0a92e131bd09f1688fe032480b65ca","target":{"file":"net/unix/af_unix.c","function":"unix_stream_read_generic"}},{"deprecated":false,"digest":{"function_hash":"222800221791782858025618860169069511688","length":1919},"id":"ASB-A-196926917-ed2800bf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/cbcf01128d0a92e131bd09f1688fe032480b65ca","target":{"file":"net/unix/af_unix.c","function":"unix_dgram_recvmsg"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196926917.json"}}],"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-11-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/cbcf01128d0a92e131bd09f1688fe032480b65ca"}]}