中危
Google Android安全漏洞（CVE-2021-0920）
2021-11-01 00:00:00 公开 ，2025-10-22 00:28:05 更新
- 关键漏洞
- CISA KEV
- 本地
- CWE Top 25 (2023)
- 开源组件漏洞
- CWE Top 25 (2024)
- 公开PoC
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2024-02-07 00:18:51
风险信息
- CVSS v2 向量
- AV:L/AC:M/Au:N/C:C/I:C/A:C
- CVSS v2 风险值
- 6.9
- CVSS v3 向量
- AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 6.4
- CVSS v3.1 向量
- AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 6.4
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Google Android是美国谷歌（Google）公司的的一套以Linux为基础的开源操作系统。Google Android 11 中的Kernel components Kernel存在安全漏洞，该漏洞源于。Google Android 11 中的Kernel components Kernel之前版本存在问题。攻击者可利用该漏洞导致由于免费使用而导致的本地权限提升。
- 修复建议
- 目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://source.android.com/security/bulletin/2021-11-01#mediatek-components
参考链接
- https://source.android.com/security/bulletin/2021-11-01
OSV · x_refsource_MISC
- https://www.auscert.org.au/bulletins/ESB-2021.4282
- https://www.auscert.org.au/bulletins/ESB-2021.3637
- https://vigilance.fr/vulnerability/Google-Android-Pixel-multiple-vulnerabilities-of-November-2021-36782
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE · mailing-list · x_refsource_MLIST
- https://vulners.com/cve/CVE-2021-0920
OSV
- https://vulners.com/cve/CVE-2021-4154
OSV
- https://vulners.com/cve/CVE-2022-0330
OSV
- https://vulners.com/cve/CVE-2022-0435
OSV
- https://vulners.com/cve/CVE-2022-0492
OSV
- https://vulners.com/cve/CVE-2022-0516
OSV
- https://vulners.com/cve/CVE-2022-0847
OSV
- https://vulners.com/cve/CVE-2022-22942
OSV
- https://osv.dev/vulnerability/ALSA-2022:0825
OSV
- https://errata.rockylinux.org/RLSA-2022:0825
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2031930
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2034514
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2042404
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2044809
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2048738
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2050237
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2051505
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2060795
OSV
- https://osv.dev/vulnerability/RLSA-2022:0825
OSV
- https://errata.rockylinux.org/RLSA-2022:0819
OSV
- https://osv.dev/vulnerability/RLSA-2022:0819
OSV
- https://osv.dev/vulnerability/DLA-2843-1
OSV
- https://android.googlesource.com/kernel/common/+/cbcf01128d0a92e131bd09f1688fe032480b65ca
OSV
- https://osv.dev/vulnerability/ASB-A-196926917
OSV
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202112-0000001228416381
HarmonyOS
- https://ubuntu.com/security/CVE-2021-0920
OSV
- https://git.kernel.org/linus/cbcf01128d0a92e131bd09f1688fe032480b65ca
OSV
- https://ubuntu.com/security/notices/USN-5361-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2021-0920
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2021-0920
OSV
- https://security-tracker.debian.org/tracker/CVE-2021-0920
OSV
- https://osv.dev/vulnerability/CVE-2021-0920
OSV
- https://ubuntu.com/security/notices/USN-7720-1
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2021-0920
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-0920
NVD · US Government Resource · Third Party Advisory