{"id":"PUB-A-168034487","details":"In drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-168034487","CVE-2021-0606"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"http://android.googlesource.com/kernel/common/+/328ec6286a78a71500b74255448e8f3c83d2b2c4"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-06-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"32970504086864143055271838817190593484","length":490},"id":"PUB-A-168034487-000891dc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/328ec6286a78a71500b74255448e8f3c83d2b2c4","target":{"file":"drivers/gpu/drm/drm_syncobj.c","function":"drm_syncobj_handle_to_fd"}},{"id":"PUB-A-168034487-4c53ecea","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/328ec6286a78a71500b74255448e8f3c83d2b2c4","target":{"file":"drivers/gpu/drm/drm_syncobj.c"},"deprecated":false,"digest":{"line_hashes":["283918458524159940181209964318280051069","109175134473222033400338055823651282914","336079167343984393011812395976112914968","171007728591941759867591366957612582902"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/kernel/common/+/328ec6286a78a71500b74255448e8f3c83d2b2c4"],"severity":"Moderate","spl":"2021-06-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-168034487.json"}}],"schema_version":"1.9.0"}