CVE-2026-21102

CriticalCVSS 9.3

Published: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Summary

Use-after-free vulnerability in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

Risk Assessment

Risk of full device compromise by a local attacker with privileged access.

Recommendation

Apply SMR Sep-2026 Release 1 to remediate the vulnerability.

Other vulnerabilities in DualDAR

CVE-2026-21101High
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

Original NVD description (English source)

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.