In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
{ "severity": "Critical", "spl": "2026-11-05", "types": [ "EoP" ] }
"https://storage.googleapis.com/android-osv/PUB-A-510379503.json"