CVE-2021-25370
medium · 6.1Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-11-08Remediation due 2022-11-29
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
6.1
CVSS
0.9%
EPSS (exploit prob.)
58th
EPSS percentile
2021-03-26
Published
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-416CWE-703
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| samsung | android | 8.0 |
| samsung | android | 8.1 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 9.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
| samsung | android | 10.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-25370