{"id":"ASB-A-515039372", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-59020", "A-515039372"], "details":"In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"126425639932980190694278468036194095350", "length":1250}, "id":"ASB-A-515039372-3d74aa86", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"removeUserData"}}, {"deprecated":false, "digest":{"line_hashes":["165168640467430886388226037656957897317", "50880485026474538308374416422711841636", "147815404217517744664807740855027829465", "38535671880121685678741155017181609506", "128153700740674493556242300796137275413", "4570648687093258509342379322463136265", "266105426118138197625706661527237411604"], "threshold":0.9}, "id":"ASB-A-515039372-89e3b53a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["279689369451050949892227746132861982193", "54166194211328152331915335765530258143", "260396818124043402480480425300126587139", "38535671880121685678741155017181609506", "181907461832609495985435846599385801831", "81229708632849856455689085541978401941", "266105426118138197625706661527237411604"], "threshold":0.9}, "id":"ASB-A-515039372-3250bc5b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"69229112094220967687525899126806227665", "length":1098}, "id":"ASB-A-515039372-e6733e89", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"removeUserData"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"69229112094220967687525899126806227665", "length":1098}, "id":"ASB-A-515039372-1bd98920", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"removeUserData"}}, {"deprecated":false, "digest":{"line_hashes":["279689369451050949892227746132861982193", "54166194211328152331915335765530258143", "260396818124043402480480425300126587139", "38535671880121685678741155017181609506", "181907461832609495985435846599385801831", "81229708632849856455689085541978401941", "266105426118138197625706661527237411604"], "threshold":0.9}, "id":"ASB-A-515039372-4b35bd1d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"69229112094220967687525899126806227665", "length":1098}, "id":"ASB-A-515039372-436c1c62", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"removeUserData"}}, {"deprecated":false, "digest":{"line_hashes":["279689369451050949892227746132861982193", "54166194211328152331915335765530258143", "260396818124043402480480425300126587139", "38535671880121685678741155017181609506", "181907461832609495985435846599385801831", "81229708632849856455689085541978401941", "266105426118138197625706661527237411604"], "threshold":0.9}, "id":"ASB-A-515039372-c2a0ae08", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["108100418231483064786735388067116526791", "157019653535009063975540659353519104096", "240239521282268889231579938930731900620", "128153700740674493556242300796137275413", "4570648687093258509342379322463136265", "266105426118138197625706661527237411604"], "threshold":0.9}, "id":"ASB-A-515039372-122f4de3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"289059199851183731998078273101334881763", "length":1098}, "id":"ASB-A-515039372-ea45ccaf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"removeUserData"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["279689369451050949892227746132861982193", "54166194211328152331915335765530258143", "260396818124043402480480425300126587139", "38535671880121685678741155017181609506", "181907461832609495985435846599385801831", "81229708632849856455689085541978401941", "266105426118138197625706661527237411604"], "threshold":0.9}, "id":"ASB-A-515039372-96881ada", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"45497245458525508833498348635079321839", "length":1140}, "id":"ASB-A-515039372-975383d3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"removeUserData"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}