Android Kernel Use-After-Free Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2019-2215 · Published 11/10/2019 · updated 17/06/2026

Android Kernel Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
Android Kernel Android	Versions not published yet (product named by CISA KEV)

Description

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

References

packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html · Exploit
packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html · Patch
packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html · Exploit
seclists.org/fulldisclosure/2019/Oct/38 · Mailing List
huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en · Third Party Advisory
lists.debian.org/debian-lts-announce/2020/01/msg00013.html · Mailing List
lists.debian.org/debian-lts-announce/2020/03/msg00001.html · Mailing List
seclists.org/bugtraq/2019/Nov/11 · Mailing List
security.netapp.com/advisory/ntap-20191031-0005 · Third Party Advisory
source.android.com/security/bulletin/2019-10-01 · Vendor Advisory
usn.ubuntu.com/4186-1 · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2019-2215

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free