CVE-2021-0401: 
NixOS vulnerability analysis and mitigation

In vow, there is a possible memory corruption vulnerability due to a race condition. This vulnerability was assigned CVE-2021-0401 and was disclosed on February 26, 2021. The vulnerability affects the vow system component and could lead to local escalation of privilege with System execution privileges (NVD).

The vulnerability is characterized as a memory corruption issue that occurs due to a race condition in the vow component. The vulnerability could be exploited to achieve local escalation of privilege, potentially allowing an attacker to execute code with System level permissions (NVD).

The successful exploitation of this vulnerability could lead to local escalation of privilege, allowing an attacker to execute code with System level permissions. This could potentially give an attacker full control over the affected system (NVD).

The vulnerability requires local access to the system for exploitation. An attacker would need to have the ability to execute code on the affected system to take advantage of the race condition (NVD).

The vulnerability was discovered and reported by Le Wu (吴乐) of Baidu Security (MediaTek). Users should apply any available security updates provided by their device manufacturer or system vendor to address this vulnerability.