{"id":"ASB-A-196046570","details":"In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-196046570","CVE-2021-0961"],"modified":"2026-06-16T15:04:57.126039127Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/e113eb454e92"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/60a4c35570d9"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/4b05a506bda0"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-12-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"spl":"2021-12-05","vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/kernel/common/+/4b05a506bda0","target":{"function":"quota_proc_write","file":"net/netfilter/xt_quota2.c"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-196046570-8bf4814e","digest":{"function_hash":"331079331341337927145497544267760580337","length":465}},{"deprecated":false,"signature_version":"v1","target":{"file":"net/netfilter/xt_quota2.c"},"source":"https://android.googlesource.com/kernel/common/+/e113eb454e92","signature_type":"Line","id":"ASB-A-196046570-9601096f","digest":{"line_hashes":["300791232439875133632716496871912264620","70038903204576172867030549493066166263","333088528853129269023570041671620429249","42207680203461640924637962347689161127","300791232439875133632716496871912264620","70038903204576172867030549493066166263","333088528853129269023570041671620429249","218940457137836909070047315208247151542"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/kernel/common/+/4b05a506bda0","target":{"file":"net/netfilter/xt_quota2.c"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-196046570-ac70b66c","digest":{"line_hashes":["153322424961026016917606699709339014016","185668712431662013693342578498774993036","25905861964383034273808152654118250552","195120841472415210120064218568328695493"],"threshold":0.9}}],"types":["ID"],"fixes":["https://android.googlesource.com/kernel/common/+/e113eb454e92","https://android.googlesource.com/kernel/common/+/60a4c35570d9","https://android.googlesource.com/kernel/common/+/4b05a506bda0"],"severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196046570.json"}}],"schema_version":"1.7.5"}