{"id":"ASB-A-500030631", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-03T17:44:55.642301420Z", "aliases":["CVE-2026-64011", "A-500030631"], "details":"In multiple locations, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":":linux_kernel:", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":":0"}, {"fixed":":2026-11-05"}]}], "versions":["Kernel"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/be7eb82f26606f1965d7d4b053e82570ea5f48a1", "https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4", "https://android.googlesource.com/kernel/common/+/1188bc5d16e4f9511414b35b6c56a79f2a5d9529", "https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817"], "severity":"High", "spl":"2026-11-05", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["59117699050172232044671190254823676396", "181726735707425598333346223843802274382", "54644126799050170587333158860160717031", "150556228744449616324482268615935652550"], "threshold":0.9}, "id":"ASB-A-500030631-100e2d36", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817", "target":{"file":"net/nfc/llcp_sock.c"}}, {"deprecated":false, "digest":{"line_hashes":["255295794711573566807377371928696544813", "87618027885131817186529478048615692292", "104934173574914253529729648693980383062", "238058737012581998191896630573354162619", "19002506967166437061603091472438387783", "215668181104127483086788102425867761957"], "threshold":0.9}, "id":"ASB-A-500030631-60ea976f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4", "target":{"file":"net/nfc/llcp_core.c"}}, {"deprecated":false, "digest":{"function_hash":"5644788837388968177210278092992481600", "length":620}, "id":"ASB-A-500030631-772885f5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4", "target":{"file":"net/nfc/llcp_core.c", "function":"nfc_llcp_recv_cc"}}, {"deprecated":false, "digest":{"function_hash":"85982762053976887637626838429277576244", "length":870}, "id":"ASB-A-500030631-e1ecb50e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817", "target":{"file":"net/nfc/llcp_sock.c", "function":"llcp_sock_release"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/be7eb82f26606f1965d7d4b053e82570ea5f48a1"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/1188bc5d16e4f9511414b35b6c56a79f2a5d9529"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817"}]}