ASB-A-500030631

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-500030631.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-500030631
Aliases
Published
2026-11-01T00:00:00Z
Modified
2026-11-03T17:44:55Z
Summary
[none]
Details

In multiple locations, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Name
:linux_kernel:

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2026-11-05

Affected versions

Other
Kernel

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/kernel/common/+/be7eb82f26606f1965d7d4b053e82570ea5f48a1",
        "https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4",
        "https://android.googlesource.com/kernel/common/+/1188bc5d16e4f9511414b35b6c56a79f2a5d9529",
        "https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817"
    ],
    "severity": "High",
    "spl": "2026-11-05",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "59117699050172232044671190254823676396",
                    "181726735707425598333346223843802274382",
                    "54644126799050170587333158860160717031",
                    "150556228744449616324482268615935652550"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-500030631-100e2d36",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817",
            "target": {
                "file": "net/nfc/llcp_sock.c"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "255295794711573566807377371928696544813",
                    "87618027885131817186529478048615692292",
                    "104934173574914253529729648693980383062",
                    "238058737012581998191896630573354162619",
                    "19002506967166437061603091472438387783",
                    "215668181104127483086788102425867761957"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-500030631-60ea976f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4",
            "target": {
                "file": "net/nfc/llcp_core.c"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "5644788837388968177210278092992481600",
                "length": 620
            },
            "id": "ASB-A-500030631-772885f5",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4",
            "target": {
                "file": "net/nfc/llcp_core.c",
                "function": "nfc_llcp_recv_cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "85982762053976887637626838429277576244",
                "length": 870
            },
            "id": "ASB-A-500030631-e1ecb50e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817",
            "target": {
                "file": "net/nfc/llcp_sock.c",
                "function": "llcp_sock_release"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-500030631.json"