CVE-2021-39711: 
Linux Kernel vulnerability analysis and mitigation

In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read vulnerability (CVE-2021-39711) affecting Android kernel. The vulnerability was disclosed in March 2022 and affects Android systems. This security flaw is due to an incorrect size value implementation (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.4 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. The flaw is classified as CWE-125 (Out-of-bounds Read). System execution privileges are required for exploitation, and no user interaction is needed (NVD).

The vulnerability can lead to local information disclosure when successfully exploited. The impact is primarily focused on confidentiality with high impact, while integrity and availability are not affected (NVD).

The vulnerability requires local access and high privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit once the attacker has the necessary privileges (NVD).

The vulnerability was addressed in the March 2022 Android security bulletin. Users should apply the security updates provided by Google to mitigate this vulnerability (Android Bulletin).