{"id":"PUB-A-197614484","details":"In nft_flush_table of nf_tables_api.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-197614484","CVE-2021-3635"],"modified":"2026-03-11T06:36:03.235389Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/8f4dc50b5c12e159"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"spl":"2022-06-05","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","id":"PUB-A-197614484-44856747","target":{"file":"net/netfilter/nf_tables_api.c"},"deprecated":false,"source":"https://android.googlesource.com/kernel/common/+/8f4dc50b5c12e159","digest":{"threshold":0.9,"line_hashes":["16499807788155931427744795268877489223","204534404321698258421847161585289544881","187554030087676587629183073256954601280","307719300518042427890433005594967079423","83442853727861301252738097874087701206","110334422007884509995933032182736069341","208134823330899312737252866681491368932","299702700535875746707811785754279091631","308493595990117255577017759205537877921"]}},{"signature_type":"Function","signature_version":"v1","id":"PUB-A-197614484-6a74328f","target":{"function":"nft_flush_table","file":"net/netfilter/nf_tables_api.c"},"deprecated":false,"source":"https://android.googlesource.com/kernel/common/+/8f4dc50b5c12e159","digest":{"length":1128,"function_hash":"34866843053721100836634346017966600930"}}],"severity":"Moderate","fixes":["https://android.googlesource.com/kernel/common/+/8f4dc50b5c12e159"],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/PUB-A-197614484.json"}}],"schema_version":"1.7.5"}