HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2019-2215

CVSS 7.8v3.1pub. 2019-10-11upd. 2025-10-24

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Canonical Ubuntu
OS
Canonical
16.04
Debian
OS
Debian
8.0
Google Android
OS
Google
all versions
Huawei Alp Al00b
HW
Huawei
all versions
Huawei Alp Al00b Firmware
OS
Huawei
< 10.0.0.162\(c00e156r2p4\)
Huawei Alp Tl00b
HW
Huawei
all versions
Huawei Alp Tl00b Firmware
OS
Huawei
< 10.0.0.162\(c01e156r1p4\)
Huawei Anne Al00
HW
Huawei
all versions
Huawei Anne Al00 Firmware
OS
Huawei
< 9.1.0.126\(c00e126r1p7t8\)
Huawei Ares Al00b
HW
Huawei
all versions
Huawei Ares Al00b Firmware
OS
Huawei
< 9.1.0.165\(c00e165r2p5t8\)
Huawei Ares Al10d
HW
Huawei
all versions
Huawei Ares Al10d Firmware
OS
Huawei
< 9.1.0.165\(c00e165r2p5t8\)
Huawei Ares Tl00chw
HW
Huawei
all versions
Huawei Ares Tl00chw Firmware
OS
Huawei
< 8.2.0.163\(c01r2p1\)
Huawei Barca Al00
HW
Huawei
all versions
Huawei Barca Al00 Firmware
OS
Huawei
< 8.0.0.377\(c00\)
Huawei Berkeley L09
HW
Huawei
all versions
Huawei Berkeley L09 Firmware
OS
Huawei
< 9.1.0.351\(c432e5r1p13t8\)
Huawei Berkeley Tl10
HW
Huawei
all versions
Huawei Berkeley Tl10 Firmware
OS
Huawei
< 9.1.0.333\(c01e333r1p1t8\)
Huawei Bla Al00b
HW
Huawei
all versions
Huawei Bla Al00b Firmware
OS
Huawei
< 10.0.0.170\(c786e170r2p4\)
Huawei Bla L29c
HW
Huawei
all versions
Huawei Bla L29c Firmware
OS
Huawei
< 9.1.0.300\(c432e4r1p11t8\)
Huawei Bla Tl00b
HW
Huawei
all versions
Huawei Bla Tl00b Firmware
OS
Huawei
< 10.0.0.170\(c01e170r1p4\)
Huawei Columbia Al00a
HW
Huawei
all versions
Huawei Columbia Al00a Firmware
OS
Huawei
< 8.1.0.186\(c00gt\)
Huawei Columbia L29d
HW
Huawei
all versions

CISA KEV — detailsi

Vendori: Android
Producti: Android Kernel
Added to KEVi: November 3, 2021
Remediation deadline (US Federal)i: May 3, 2022(overdue)

🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."

🔴