NetSight
IP …
high7.8Known exploitedPublic exploit code

CVE-2019-2215

Android Kernel Use-After-Free Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

Affected products

VendorProductAffected versions
GoogleAndroid
All versions
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Version 16.04
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappHci Management Node
All versions
NetappService Processor
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappAff Baseboard Management Controller Firmware
All versions
NetappA320 Firmware
All versions

Weakness classification

CWE-416

References