CVE-2026-21102

MediumCVSS 6.7

Published: 09/09/2026(UTC)Updated: 11/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Use-after-free vulnerability in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

Risk Assessment

Risk of full device compromise by a local attacker with privileged access.

Recommendation

Apply SMR Sep-2026 Release 1 to remediate the vulnerability.

Other vulnerabilities in DualDAR

CVE-2026-21101Medium
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

Original NVD description (English source)

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS