Android · Kernel
CVE-2021-0920
Android Kernel Race Condition Vulnerability
What it is
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel
CISA: Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: June 13, 2022
More exploited flaws from Android
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 7, 2024 | Remote Code Execution | Kernel | High 7.8 | 2.7% |
| May 23, 2022 | Use-After-Free | Kernel | High 7.8 | 1.1% |
| Jun 2, 2026 | Integer Overflow | Framework | High 8.4 | 1.9% |
| Dec 2, 2025 | Privilege Escalation | Framework | High 7.8 | 0.3% |
| Dec 2, 2025 | Information Disclosure | Framework | Medium 5.5 | 0.3% |
| Sep 4, 2025 | Use-After-Free | Runtime | High 8.8 | 0.6% |
| Nov 7, 2024 | Privilege Escalation | Framework | High 7.3 | 0.7% |
| Jun 13, 2024 | Privilege Escalation | Pixel | High 8.1 | 3.0% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.