{"id":"PUB-A-194696049","details":"In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-194696049","CVE-2021-39657"],"modified":"2026-03-11T06:34:45.193827Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/35fc4cd34426c242ab015ef280853b7bff101f48"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-12-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/kernel/common/+/35fc4cd34426c242ab015ef280853b7bff101f48","digest":{"line_hashes":["305346347420555302990032506475500740507","57146156172964670573879327673475273216","40554493845984872555023744390808030834","150782253644258848182730616760848844028","262024752335588956295697990325079222093","275943583354906512207834669038274201453","30331954069471717985910528715156950658","200641295129981722383875632295382996593","2431489166792267177929009793294744317","326795116488284732551327449320521323762","98396903598544293283499732389198455804","203426630515740610168080129400124467616","224952036548519233168464291339186747636","94772291503982484100251412512207265161","297084363862851361762562741017211168057","179843703356585037613524101116147813981","292282741712125973344533935131065459918","310750789642628357794818640474394743894"],"threshold":0.9},"signature_version":"v1","id":"PUB-A-194696049-9e85d991","signature_type":"Line","deprecated":false,"target":{"file":"drivers/scsi/ufs/ufshcd.c"}},{"source":"https://android.googlesource.com/kernel/common/+/35fc4cd34426c242ab015ef280853b7bff101f48","digest":{"function_hash":"68556209577409845507073909729827869540","length":948},"signature_version":"v1","id":"PUB-A-194696049-e3c45405","signature_type":"Function","deprecated":false,"target":{"function":"ufshcd_eh_device_reset_handler","file":"drivers/scsi/ufs/ufshcd.c"}}],"severity":"Moderate","spl":"2021-12-05","fixes":["https://android.googlesource.com/kernel/common/+/35fc4cd34426c242ab015ef280853b7bff101f48"],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/PUB-A-194696049.json"}}],"schema_version":"1.7.5"}