CVE-2021-0920

CWE-362

Medium

63.6

RPS

Description

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

Source: NVD

CVSS: 6.4; Medium · v3.1
EPSS: 0.82%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since May 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-362; CWE-362, CWE-416
Published: 15 Dec 2021; Last modified 23 Oct 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2021-0920

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time

CVE-2021-0920

Description

Signals

Get this score from the API