CVE-2026-21101

MediumCVSS 6.7

Published: 09/09/2026(UTC)Updated: 11/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

Risk Assessment

A local attacker with privileged access could gain full control of the system.

Recommendation

Apply SMR Sep-2026 Release 1 to remediate the vulnerability.

Other vulnerabilities in DualDAR

CVE-2026-21102Medium
Use-after-free vulnerability in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

Original NVD description (English source)

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS