{"id":"ASB-A-194461020","details":"In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-194461020","CVE-2021-0924"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-11-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-11-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"file":"drivers/usb/host/xhci-plat.h"},"deprecated":false,"digest":{"line_hashes":["296006135374153502650136789747179702256","217159512600921346983341948625994838417","160429453232037323526628748569608099908","193600732335296680043124891759648905246"],"threshold":0.9},"id":"ASB-A-194461020-3200f983","signature_type":"Line","signature_version":"v1"},{"digest":{"line_hashes":["65428680134164326322057546870296949292","303072306054238883595727577573025816055","42220646100694777520453847116425822962","216533713427359301844167992195965822814","25528724874335813220711041707630977473","311336264386479869260568484405144833710","81063368215418693213834082312190684106","310546719597199516598815494422007457600","310559344884385429607470262976318504137","68419760345811645183698697123721005670","53073571646637977252105000344701892913","318754442047635110851922473336600156465","212087509126505534103086525065600928125","236368536978864450422384657808192069627"],"threshold":0.9},"id":"ASB-A-194461020-5a444965","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"file":"drivers/usb/host/xhci-plat.c"},"deprecated":false},{"id":"ASB-A-194461020-7cd0fc52","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"file":"drivers/usb/host/xhci.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["210885545745472116702241275745999693296","283252374392363481500010020423446567932","331460533588962771893617228252886273781","233532721724632329357361701797015958329","192091473560401473509916039596264421613","161288891347695359775749957266605571333","306893186768999960432735404132730239828","243756039758233042387197629917671581081"]}},{"digest":{"function_hash":"182743551188546463145931240395122396814","length":80},"id":"ASB-A-194461020-b8505d5f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"file":"drivers/usb/host/xhci.c","function":"xhci_vendor_get_ops"},"deprecated":false},{"digest":{"line_hashes":["187221316143190153406769378538013512897","20531172323687606511459870440641556444","1803244950909914522965904337999221500"],"threshold":0.9},"id":"ASB-A-194461020-bd7699bc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"file":"drivers/usb/host/xhci.h"},"deprecated":true},{"source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"function":"xhci_vendor_cleanup","file":"drivers/usb/host/xhci-plat.c"},"deprecated":false,"digest":{"function_hash":"147159070459491619183761293798301087003","length":210},"id":"ASB-A-194461020-d221f6b4","signature_type":"Function","signature_version":"v1"},{"digest":{"length":310,"function_hash":"241179395579510555574072957083271476109"},"id":"ASB-A-194461020-dc933947","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497","target":{"file":"drivers/usb/host/xhci-plat.c","function":"xhci_vendor_init"},"deprecated":false}],"fixes":["https://android.googlesource.com/kernel/common/+/df1995aede8e5b13a5ba4d36b48ed88d5bb84497"],"severity":"High","spl":"2021-11-05","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-194461020.json"}}],"schema_version":"1.9.0"}