ASB-A-498369302

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-498369302.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-498369302

Aliases

A-498369302
CVE-2026-58845

Published

2026-11-01T00:00:00Z

Modified

2026-11-02T17:11:16Z

Summary

[none]

Details

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Name: :linux_kernel:

Affected ranges

Type: ECOSYSTEM
Events: Introduced

:0

Fixed

:2026-11-05

Affected versions

Other

Kernel

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
        "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4"
    ],
    "severity":  "High",
    "spl":  "2026-11-05",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "138618085237932976683537176392929429325",
                    "164700779995532424601475696421409856549",
                    "252739025540847578067275555685806687151",
                    "215454440232429209766420161919886400579",
                    "23943790151979495776895661211521840440",
                    "22726359376400105223267484317924945279",
                    "91274249687759423413354398520727346540",
                    "281571339791781064631346072896019236316",
                    "299273987025652073853273903656277174042",
                    "107429096351079446526376777339698333882",
                    "200826141141923805549235298799387315448",
                    "272068209072605044293301809956686769325",
                    "141424315696456174516921644885930780112",
                    "226922109799378794449077237734533286066"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498369302-060d08ad",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "mm/pgsize_migration.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "167811500446371853359355584031907583456",
                "length":  139
            },
            "id":  "ASB-A-498369302-233b672d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "mm/pgsize_migration.c",
                "function":  "vma_pad_pages"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "53759836439725674207719238702216148090",
                "length":  528
            },
            "id":  "ASB-A-498369302-33c9f38a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "mm/pgsize_migration.c",
                "function":  "madvise_vma_pad_pages"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "33156412857836771572310817264037046799",
                    "163339827389704785468244232014221440244",
                    "14555380638292545549596680980096222518",
                    "32449271349094710935135881177095038863"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498369302-39a3c640",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "mm/vma.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "120039717482386777023365200047912662335",
                    "222790380629037764461076007614834868441",
                    "21168759412116000934060150640278794887",
                    "294847872275791271920786387702043640207",
                    "37538056754085589551234921261707506463",
                    "199827894468267114451132362989834965672"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498369302-4d566150",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "include/linux/pgsize_migration.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "311320297995644818983312130273865573781",
                "length":  727
            },
            "id":  "ASB-A-498369302-80f69915",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "mm/pgsize_migration.c",
                "function":  "linker_ctx"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "182985416136728618113477119094021786260",
                "length":  1476
            },
            "id":  "ASB-A-498369302-834b0032",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/ed0e57e1e27a9eecd6c1a3dd1dd9ed1b8d1a06b4",
            "target":  {
                "file":  "mm/vma.c",
                "function":  "copy_vma"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "138618085237932976683537176392929429325",
                    "164700779995532424601475696421409856549",
                    "252739025540847578067275555685806687151",
                    "215454440232429209766420161919886400579",
                    "23943790151979495776895661211521840440",
                    "22726359376400105223267484317924945279",
                    "91274249687759423413354398520727346540",
                    "281571339791781064631346072896019236316",
                    "299273987025652073853273903656277174042",
                    "107429096351079446526376777339698333882",
                    "200826141141923805549235298799387315448",
                    "272068209072605044293301809956686769325",
                    "141424315696456174516921644885930780112",
                    "226922109799378794449077237734533286066"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498369302-a1f0de4e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "mm/pgsize_migration.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "33156412857836771572310817264037046799",
                    "142929018069307820107996373522924193414",
                    "271838305760057325923601629056475085049",
                    "182168212015796945739125417427987961954"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498369302-aa502b16",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "mm/mmap.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "328020094268287710011788153673150084776",
                "length":  733
            },
            "id":  "ASB-A-498369302-c0ca459e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "mm/pgsize_migration.c",
                "function":  "linker_ctx"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "167811500446371853359355584031907583456",
                "length":  139
            },
            "id":  "ASB-A-498369302-ccca061d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "mm/pgsize_migration.c",
                "function":  "vma_pad_pages"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "33224860657722801318663158644835031303",
                "length":  480
            },
            "id":  "ASB-A-498369302-dc480c60",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "mm/pgsize_migration.c",
                "function":  "madvise_vma_pad_pages"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "12152606423924547036832362234982228355",
                    "294847872275791271920786387702043640207",
                    "37538056754085589551234921261707506463",
                    "199827894468267114451132362989834965672"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498369302-e5ef4d12",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "include/linux/pgsize_migration.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "86340606046549809134060597708794628970",
                "length":  1527
            },
            "id":  "ASB-A-498369302-e824f1c9",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/3b9b40df51bda90ffb2833dcef11905e751dafdb",
            "target":  {
                "file":  "mm/mmap.c",
                "function":  "copy_vma"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-498369302.json"