ASB-A-498749316

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-498749316.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-498749316
Aliases
  • A-498749316
  • CVE-2026-58829
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:27Z
Summary
[none]
Details

In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Name
:linux_kernel:

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2026-11-05

Affected versions

Other
Kernel

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/kernel/common/+/984713cde654f06871c542c469e3c226c8a79d9b",
        "https://android.googlesource.com/kernel/common/+/517040c192cebb334766f43604e6a7ebb79d43ae"
    ],
    "severity":  "High",
    "spl":  "2026-11-05",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103183245435895329758111521619183412475",
                "length":  765
            },
            "id":  "ASB-A-498749316-09cdf045",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/984713cde654f06871c542c469e3c226c8a79d9b",
            "target":  {
                "file":  "fs/fuse/backing.c",
                "function":  "fuse_backing_mmap"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "193087334283541105748510376634326329498",
                    "213455037205509970408385564439593171795",
                    "54751123933479230246249745524088194866",
                    "313169304456861125466987609152104425572",
                    "335854022435646259869140970020295193341",
                    "216655824640211384670769291939847961504",
                    "31385670489753421034455589149691118878",
                    "184357602709528659277979582734931232071",
                    "34474630534719346179715003026132362452"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498749316-11d00b28",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/517040c192cebb334766f43604e6a7ebb79d43ae",
            "target":  {
                "file":  "fs/fuse/backing.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "193087334283541105748510376634326329498",
                    "213455037205509970408385564439593171795",
                    "54751123933479230246249745524088194866",
                    "313169304456861125466987609152104425572",
                    "335854022435646259869140970020295193341",
                    "216655824640211384670769291939847961504",
                    "31385670489753421034455589149691118878",
                    "184357602709528659277979582734931232071",
                    "34474630534719346179715003026132362452"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-498749316-9a22e9d0",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/984713cde654f06871c542c469e3c226c8a79d9b",
            "target":  {
                "file":  "fs/fuse/backing.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "7599780377113517780085190989890077268",
                "length":  802
            },
            "id":  "ASB-A-498749316-b0ec825d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/517040c192cebb334766f43604e6a7ebb79d43ae",
            "target":  {
                "file":  "fs/fuse/backing.c",
                "function":  "fuse_backing_mmap"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-498749316.json"