{"id":"PUB-A-188883590","details":"In llcp_sock_bind/connect of llcp_sock.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-188883590","CVE-2021-23134"],"modified":"2026-03-11T06:34:25.362644Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/c61760e6940d"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-12-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"severity":"Moderate","vanir_signatures":[{"signature_version":"v1","id":"PUB-A-188883590-2a529ed9","deprecated":false,"target":{"file":"net/nfc/llcp_sock.c"},"signature_type":"Line","digest":{"line_hashes":["311094159527864628640556853982591429526","203292252911839515088011983804166653463","308573746362083104035073468352641602010","5279465986961289992332284036729216628","85575399929900907337989227198497564042","126171394193079237581312123621842699727","288547535770063650017500347390234957222","149409826401548706840558205560670734961","166002976706544160484421132193625339354","44404290750259019290273165593457701535","84182691138410624671421697158134401692","136914315875162032102166272494007540277","38929964334056905252990502398175936064","5279465986961289992332284036729216628","53389377917570243283987578637839388379","98390281507922327696085971841354854994","175263582922151470655635921516058473873","137566750082232521716198589159339969188"],"threshold":0.9},"source":"https://android.googlesource.com/kernel/common/+/c61760e6940d"},{"signature_version":"v1","id":"PUB-A-188883590-5fd903ce","deprecated":false,"target":{"function":"llcp_sock_bind","file":"net/nfc/llcp_sock.c"},"signature_type":"Function","digest":{"function_hash":"257256339786181560469811602584949137300","length":1641},"source":"https://android.googlesource.com/kernel/common/+/c61760e6940d"},{"signature_version":"v1","id":"PUB-A-188883590-965cb533","deprecated":false,"target":{"function":"llcp_sock_connect","file":"net/nfc/llcp_sock.c"},"signature_type":"Function","digest":{"function_hash":"156832375398182454174429829983129193647","length":2419},"source":"https://android.googlesource.com/kernel/common/+/c61760e6940d"}],"types":["EoP"],"spl":"2021-12-05","fixes":["https://android.googlesource.com/kernel/common/+/c61760e6940d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/PUB-A-188883590.json"}}],"schema_version":"1.7.5"}