CVE-2021-1048

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	Android	Android kernel

References

https://source.android.com/security/bulletin/2021-11-01Patch, Vendor Advisory
https://source.android.com/security/bulletin/2021-11-01Patch, Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1048Third Party Advisory, US Government Resource

Timeline

Published: Dec 15, 2021
Last modified: Jun 17, 2026
Added to CISA KEV: May 23, 2022
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-10499.8Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 CVE-2021-10507.8In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to lo CVE-2021-10518.4NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a CVE-2021-10527.8NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for CVE-2021-10535.5NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for CVE-2021-10545.5NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEsc CVE-2021-10555.3NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEsc CVE-2021-10567.1NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not comple CVE-2021-10577.8NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resour CVE-2021-10587.1NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input data size is not validated,CVE-2021-10597.8NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflo CVE-2021-10607.1NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, whi