CVE-2021-39713: debian debian_linux

Modified

AliasesSUSE-SU-2022:2285-1UBUNTU-CVE-2021-39713DEBIAN-CVE-2021-39713

Published 16-03-2022Last modified 04-08-2024

Vulnerability summary

CVE-2021-39713 is a high (CVSS 7.0) vulnerability in debian debian_linux. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.8% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.0/10

010

High · v3.1 (NVD)

EPSS score

0.21%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Timeline

16-03-2022
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

CVSS metrics

4 scores · 3 sources · 2 versions

v3.17.0v2.06.9

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.21% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu40 products

linux< 3.13.0-190.241 | < 4.4.0-224.257
linux-aws< 4.4.0-1104.109 | < 4.4.0-1140.154
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)

Show all 40

Debian2 products

linux< 5.2.6-1
debian_linuxEOL9.0

Suse2 products

kgraft-patch-SLE12-SP3_Update_45&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 2-2.2
kgraft-patch-SLE12-SP3_Update_45&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 2-2.2

Google1 product

androidna

4 vendors · 45 products

References

17 links

source.android.com/security/bulletin/pixel/2022-03-01X Refsource MISCREPORTPatchVendor Advisory
packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlMailing ListX Refsource MLISTThird Party Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222285-1/Advisory
bugzilla.suse.com/1197211REPORT
www.suse.com/security/cve/CVE-2021-39713WEB
ubuntu.com/security/CVE-2021-39713REPORT
android.googlesource.com/kernel/common/+/e368fdb61d8e7REPORT
android.googlesource.com/kernel/common/+/9d7e82cec35c0REPORT
android.googlesource.com/kernel/common/+/3a7d0d07a3867REPORT

Show all 17 references