CVE-2021-39636

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-120612905References: Upstream kernel

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-665

Affected software

No affected versions have been published.

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-396374.4In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This coCVE-2021-396386.7In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local esCVE-2021-396396.8In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of prCVE-2021-39645.9elgg is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2021-396407.8In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation ofCVE-2021-396419.8Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/ACVE-2021-396426.4In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to localCVE-2021-396436.7In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of theCVE-2021-396449.8Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/ACVE-2021-396459.8Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/ACVE-2021-396467.5Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/ACVE-2021-396474.4In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper