ASB-A-498371235

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-498371235.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-498371235

Aliases

A-498371235
CVE-2026-58942

Published

2026-11-01T00:00:00Z

Modified

2026-11-02T16:56:16Z

Summary

[none]

Details

In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Name: :linux_kernel:

Affected ranges

Type: ECOSYSTEM
Events: Introduced

:0

Fixed

:2026-11-05

Affected versions

Other

Kernel

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/kernel/common/+/27d9c79c71ceaaee3c31337658a699364ec7d833",
        "https://android.googlesource.com/kernel/common/+/019d909caeb85547b9aed2beea73101ea73b958f"
    ],
    "severity":  "High",
    "spl":  "2026-11-05",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "54641339401774263650370781699250857284",
                "length":  731
            },
            "id":  "ASB-A-498371235-0e2a9cb5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/019d909caeb85547b9aed2beea73101ea73b958f",
            "target":  {
                "file":  "mm/memory.c",
                "function":  "do_fault_around"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "335005123885143385767006061691967092293",
                    "57367293971869288443827641052309497977",
                    "118959919782105360570205502162670195986",
                    "13308996826925379391794621566570904083",
                    "323157253887917129352491477785697135330",
                    "277778080932326382533191655658139352233",
                    "84411702661768995662438030294779814762",
                    "85956386676670030312695502482596184283",
                    "172296345848558093735429897288925004762",
                    "284321043766182342738473926992583103122"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498371235-13929f83",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/27d9c79c71ceaaee3c31337658a699364ec7d833",
            "target":  {
                "file":  "mm/memory.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "54641339401774263650370781699250857284",
                "length":  731
            },
            "id":  "ASB-A-498371235-4393ff30",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/27d9c79c71ceaaee3c31337658a699364ec7d833",
            "target":  {
                "file":  "mm/memory.c",
                "function":  "do_fault_around"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "335005123885143385767006061691967092293",
                    "57367293971869288443827641052309497977",
                    "118959919782105360570205502162670195986",
                    "13308996826925379391794621566570904083",
                    "323157253887917129352491477785697135330",
                    "277778080932326382533191655658139352233",
                    "84411702661768995662438030294779814762",
                    "85956386676670030312695502482596184283",
                    "172296345848558093735429897288925004762",
                    "284321043766182342738473926992583103122"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498371235-f8e96d1e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/019d909caeb85547b9aed2beea73101ea73b958f",
            "target":  {
                "file":  "mm/memory.c"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-498371235.json"