{"id":"ASB-A-515039372","details":"In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-515039372","CVE-2026-59020"],"modified":"2026-11-02T16:56:17.621028478Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-515039372-3d74aa86","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"removeUserData"},"deprecated":false,"digest":{"function_hash":"126425639932980190694278468036194095350","length":1250}},{"digest":{"line_hashes":["165168640467430886388226037656957897317","50880485026474538308374416422711841636","147815404217517744664807740855027829465","38535671880121685678741155017181609506","128153700740674493556242300796137275413","4570648687093258509342379322463136265","266105426118138197625706661527237411604"],"threshold":0.9},"id":"ASB-A-515039372-89e3b53a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["279689369451050949892227746132861982193","54166194211328152331915335765530258143","260396818124043402480480425300126587139","38535671880121685678741155017181609506","181907461832609495985435846599385801831","81229708632849856455689085541978401941","266105426118138197625706661527237411604"]},"id":"ASB-A-515039372-3250bc5b","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"removeUserData"},"deprecated":false,"digest":{"length":1098,"function_hash":"69229112094220967687525899126806227665"},"id":"ASB-A-515039372-e6733e89","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485","target":{"function":"removeUserData","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"function_hash":"69229112094220967687525899126806227665","length":1098},"id":"ASB-A-515039372-1bd98920","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["279689369451050949892227746132861982193","54166194211328152331915335765530258143","260396818124043402480480425300126587139","38535671880121685678741155017181609506","181907461832609495985435846599385801831","81229708632849856455689085541978401941","266105426118138197625706661527237411604"],"threshold":0.9},"id":"ASB-A-515039372-4b35bd1d"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"removeUserData"},"deprecated":false,"digest":{"function_hash":"69229112094220967687525899126806227665","length":1098},"id":"ASB-A-515039372-436c1c62","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["279689369451050949892227746132861982193","54166194211328152331915335765530258143","260396818124043402480480425300126587139","38535671880121685678741155017181609506","181907461832609495985435846599385801831","81229708632849856455689085541978401941","266105426118138197625706661527237411604"]},"id":"ASB-A-515039372-c2a0ae08"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["108100418231483064786735388067116526791","157019653535009063975540659353519104096","240239521282268889231579938930731900620","128153700740674493556242300796137275413","4570648687093258509342379322463136265","266105426118138197625706661527237411604"],"threshold":0.9},"id":"ASB-A-515039372-122f4de3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}},{"deprecated":false,"digest":{"function_hash":"289059199851183731998078273101334881763","length":1098},"id":"ASB-A-515039372-ea45ccaf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"removeUserData"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e"],"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["279689369451050949892227746132861982193","54166194211328152331915335765530258143","260396818124043402480480425300126587139","38535671880121685678741155017181609506","181907461832609495985435846599385801831","81229708632849856455689085541978401941","266105426118138197625706661527237411604"],"threshold":0.9},"id":"ASB-A-515039372-96881ada"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"removeUserData"},"deprecated":false,"digest":{"function_hash":"45497245458525508833498348635079321839","length":1140},"id":"ASB-A-515039372-975383d3","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"}}],"schema_version":"1.9.2"}