{"id":"PUB-A-188883590","details":"In llcp_sock_bind/connect of llcp_sock.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-188883590","CVE-2021-23134"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/c61760e6940d"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-12-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/c61760e6940d"],"severity":"Moderate","vanir_signatures":[{"deprecated":false,"signature_version":"v1","target":{"file":"net/nfc/llcp_sock.c"},"signature_type":"Line","source":"https://android.googlesource.com/kernel/common/+/c61760e6940d","digest":{"line_hashes":["311094159527864628640556853982591429526","203292252911839515088011983804166653463","308573746362083104035073468352641602010","5279465986961289992332284036729216628","85575399929900907337989227198497564042","126171394193079237581312123621842699727","288547535770063650017500347390234957222","149409826401548706840558205560670734961","166002976706544160484421132193625339354","44404290750259019290273165593457701535","84182691138410624671421697158134401692","136914315875162032102166272494007540277","38929964334056905252990502398175936064","5279465986961289992332284036729216628","53389377917570243283987578637839388379","98390281507922327696085971841354854994","175263582922151470655635921516058473873","137566750082232521716198589159339969188"],"threshold":0.9},"id":"PUB-A-188883590-2a529ed9"},{"deprecated":false,"signature_version":"v1","target":{"file":"net/nfc/llcp_sock.c","function":"llcp_sock_bind"},"signature_type":"Function","source":"https://android.googlesource.com/kernel/common/+/c61760e6940d","digest":{"function_hash":"257256339786181560469811602584949137300","length":1641},"id":"PUB-A-188883590-5fd903ce"},{"deprecated":false,"signature_version":"v1","target":{"file":"net/nfc/llcp_sock.c","function":"llcp_sock_connect"},"signature_type":"Function","source":"https://android.googlesource.com/kernel/common/+/c61760e6940d","digest":{"function_hash":"156832375398182454174429829983129193647","length":2419},"id":"PUB-A-188883590-965cb533"}],"spl":"2021-12-05","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-188883590.json"}}],"schema_version":"1.7.5"}