{"id":"ASB-A-500030631","details":"In multiple locations, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-500030631","CVE-2026-64011"],"modified":"2026-11-03T17:44:55.642301420Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/be7eb82f26606f1965d7d4b053e82570ea5f48a1"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/1188bc5d16e4f9511414b35b6c56a79f2a5d9529"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2026-11-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817","target":{"file":"net/nfc/llcp_sock.c"},"deprecated":false,"digest":{"line_hashes":["59117699050172232044671190254823676396","181726735707425598333346223843802274382","54644126799050170587333158860160717031","150556228744449616324482268615935652550"],"threshold":0.9},"id":"ASB-A-500030631-100e2d36","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4","target":{"file":"net/nfc/llcp_core.c"},"deprecated":false,"digest":{"line_hashes":["255295794711573566807377371928696544813","87618027885131817186529478048615692292","104934173574914253529729648693980383062","238058737012581998191896630573354162619","19002506967166437061603091472438387783","215668181104127483086788102425867761957"],"threshold":0.9},"id":"ASB-A-500030631-60ea976f","signature_type":"Line"},{"target":{"function":"nfc_llcp_recv_cc","file":"net/nfc/llcp_core.c"},"deprecated":false,"digest":{"function_hash":"5644788837388968177210278092992481600","length":620},"id":"ASB-A-500030631-772885f5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4"},{"signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817","target":{"file":"net/nfc/llcp_sock.c","function":"llcp_sock_release"},"deprecated":false,"digest":{"function_hash":"85982762053976887637626838429277576244","length":870},"id":"ASB-A-500030631-e1ecb50e","signature_type":"Function"}],"fixes":["https://android.googlesource.com/kernel/common/+/be7eb82f26606f1965d7d4b053e82570ea5f48a1","https://android.googlesource.com/kernel/common/+/e63aaa33966a89eca6ec07492b0525f0db045bc4","https://android.googlesource.com/kernel/common/+/1188bc5d16e4f9511414b35b6c56a79f2a5d9529","https://android.googlesource.com/kernel/common/+/0ad33340b17e71d9764987f0cd30530ad850e817"],"severity":"High","spl":"2026-11-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-500030631.json"}}],"schema_version":"1.9.2"}