Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Android kernel can let apps gain system control

CVE-2019-2215 · published 7 years ago · actively exploited
Summary

A coding mistake in the Android kernel's core component can let a malicious app break out of its limited rights and take control of the entire device. The same flaw also exists in Linux kernels used by Debian, Ubuntu and NetApp's cloud backup service, so those systems could be affected as well. Install the latest security updates from your operating system or service provider as soon as they are available.

What to do
  • Update debian linux to version 4.15.4-1.
  • Update canonical linux-aws to version 4.4.0-1058.62.
  • Update canonical linux-lts-xenial to version 4.4.0-168.197~14.04.1.
  • Update canonical linux to version 4.4.0-168.197.
  • Update canonical linux-aws to version 4.4.0-1098.109.
  • Update canonical linux-azure to version 4.15.0-1013.13~16.04.2.
  • Update canonical linux-gcp to version 4.15.0-1014.14~16.04.1.
  • Update canonical linux-hwe to version 4.15.0-24.26~16.04.1.
  • Update canonical linux-kvm to version 4.4.0-1062.69.
  • Update canonical linux-raspi2 to version 4.4.0-1125.134.
  • Update canonical linux-snapdragon to version 4.4.0-1129.137.
  • Update canonical linux-fips to version 4.4.0-1025.30.
  • Update canonical linux-snapdragon to version 4.15.0-1053.57.
  • Update huawei alp-al00b_firmware to version 10.0.0.162\(c00e156r2p4\) or later.
  • Update huawei alp-tl00b_firmware to version 10.0.0.162\(c01e156r1p4\) or later.
  • Update huawei anne-al00_firmware to version 9.1.0.126\(c00e126r1p7t8\) or later.
  • Update huawei ares-al00b_firmware to version 9.1.0.165\(c00e165r2p5t8\) or later.
  • Update huawei ares-al10d_firmware to version 9.1.0.165\(c00e165r2p5t8\) or later.
  • Update huawei ares-tl00chw_firmware to version 8.2.0.163\(c01r2p1\) or later.
  • Update huawei bla-al00b_firmware to version 10.0.0.170\(c786e170r2p4\) or later.
  • Update huawei bla-l29c_firmware to version 9.1.0.300\(c432e4r1p11t8\) or later.
  • Update huawei bla-tl00b_firmware to version 10.0.0.170\(c01e170r1p4\) or later.
  • Update huawei barca-al00_firmware to version 8.0.0.377\(c00\) or later.
  • Update huawei berkeley-l09_firmware to version 9.1.0.351\(c432e5r1p13t8\) or later.
  • Update huawei berkeley-tl10_firmware to version 9.1.0.333\(c01e333r1p1t8\) or later.
  • Update huawei columbia-al00a_firmware to version 8.1.0.186\(c00gt\) or later.
  • Update huawei columbia-l29d_firmware to version 9.1.0.325\(c432e4r1p12t8\) or later.
  • Update huawei cornell-tl10b_firmware to version 9.1.0.321\(c01e320r1p1t8\) or later.
  • Update huawei duke-l09i_firmware to version 9.0.1.171\(c675e6r1p5t8\) or later.
  • Update huawei dura-al00a_firmware to version 1.0.0.190\(c00\) or later.
  • Update huawei figo-al00a_firmware to version 9.1.0.130\(c00e115r2p8t8\) or later.
  • Update huawei florida-al20b_firmware to version 9.1.0.128\(c00e112r1p6t8\) or later.
  • Update huawei florida-l03_firmware to version 9.1.0.154\(c605e7r1p2t8\) or later.
  • Update huawei florida-l21_firmware to version 9.1.0.154\(c605e7r1p2t8\) or later.
  • Update huawei florida-l22_firmware to version 9.1.0.150\(c636e6r1p5t8\) or later.
  • Update huawei florida-tl10b_firmware to version 9.1.0.128\(c01e112r1p6t8\) or later.
  • Update huawei p20_firmware to version 9.1.0.312\(c00e312r1p1t8\) or later.
  • Update huawei y9_2019_firmware to version 9.1.0.297\(c605e4r1p1t8\) or later.
  • Update huawei nova_2s_firmware to version 9.1.0.210\(c01e110r1p9t8\) or later.
  • Update huawei nova_3_firmware to version 9.1.0.351\(c00e351r1p1t8\) or later.
  • Update huawei honor_view_20_firmware to version 10.1.0.214\(c10e5r4p3\) or later.
  • Update huawei jakarta-al00a_firmware to version 9.1.0.260\(c00e120r2p2\) or later.
  • Update huawei johnson-tl00d_firmware to version 9.1.0.219\(c01e18r3p2t8\) or later.
  • Update huawei leland-al10b_firmware to version 9.1.0.130\(c00e112r2p10t8\) or later.
  • Update huawei leland-l21a_firmware to version 9.1.0.156\(c185e5r1p5t8\) or later.
  • Update huawei leland-l32a_firmware to version 9.1.0.153\(c675e6r1p4t8\) or later.
  • Update huawei leland-tl10b_firmware to version 9.1.0.130\(c01e112r2p10t8\) or later.
  • Update huawei leland-tl10c_firmware to version 9.1.0.130\(c01e112r2p10t8\) or later.
  • Update huawei lelandp-al00c_firmware to version 9.1.0.130\(c00e112r2p10t8\) or later.
  • Update huawei lelandp-l22c_firmware to version 9.1.0.156\(c636e5r1p5t8\) or later.
  • Update huawei neo-al00d_firmware to version 9.1.0.321\(c786e320r1p1t8\) or later.
  • Update huawei princeton-al10b_firmware to version 10.1.0.160\(c00e160r2p11\) or later.
  • Update huawei rhone-al00_firmware to version 8.0.0.376\(c00\) or later.
  • Update huawei stanford-l09_firmware to version 9.1.0.211\(c635e2r1p4t8\) or later.
  • Update huawei stanford-l09s_firmware to version 9.1.0.210\(c432e2r1p5t8\) or later.
  • Update huawei sydney-al00_firmware to version 9.1.0.212\(c00e62r1p7t8\) or later.
  • Update huawei sydney-tl00_firmware to version 9.1.0.212\(c01e62r1p7t8\) or later.
  • Update huawei sydneym-al00_firmware to version 9.1.0.212\(c00e62r1p7t8\) or later.
  • Update huawei tony-al00b_firmware to version 10.0.0.175\(c00e59r2p11\) or later.
  • Update huawei tony-tl00b_firmware to version 10.0.0.175\(c01e59r2p11\) or later.
  • Update huawei yale-al00a_firmware to version 10.1.0.160\(c00e160r8p12\) or later.
  • Update huawei yale-l21a_firmware to version 10.1.0.231\(c10e3r3p2\) or later.
  • Update huawei yale-tl00b_firmware to version 10.1.0.160\(c01e160r8p12\) or later.
  • Update huawei honor_9i_firmware to version 9.1.0.130\(c00e112r2p10t8\) or later.
Affected software
Ecosystem VendorProductAffected versions
– android android kernel All versions
– google android All versions
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
– debian debian_linux 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
– canonical ubuntu_linux 16.04
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
– netapp cloud_backup All versions
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
– netapp data_availability_services All versions
cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*
– netapp hci_management_node All versions
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
– netapp service_processor All versions
cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*
– netapp solidfire All versions
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
– netapp steelstore_cloud_integrated_storage All versions
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
– netapp solidfire_baseboard_management_controller_firmware All versions
cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*
– netapp aff_baseboard_management_controller_firmware All versions
cpe:2.3:o:netapp:aff_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*
– netapp a320_firmware All versions
cpe:2.3:o:netapp:a320_firmware:-:*:*:*:*:*:*:*
– netapp c190_firmware All versions
cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:*
– netapp a220_firmware All versions
cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:*
– netapp fas2720_firmware All versions
cpe:2.3:o:netapp:fas2720_firmware:-:*:*:*:*:*:*:*
– netapp fas2750_firmware All versions
cpe:2.3:o:netapp:fas2750_firmware:-:*:*:*:*:*:*:*
– netapp a800_firmware All versions
cpe:2.3:o:netapp:a800_firmware:-:*:*:*:*:*:*:*
– netapp h300s_firmware All versions
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
– netapp h500s_firmware All versions
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
– netapp h700s_firmware All versions
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
– netapp h410s_firmware All versions
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
– netapp h410c_firmware All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
– netapp h610s_firmware All versions
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
– huawei alp-al00b_firmware < 10.0.0.162\(c00e156r2p4\)
cpe:2.3:o:huawei:alp-al00b_firmware:*:*:*:*:*:*:*:*
– huawei alp-tl00b_firmware < 10.0.0.162\(c01e156r1p4\)
cpe:2.3:o:huawei:alp-tl00b_firmware:*:*:*:*:*:*:*:*
– huawei anne-al00_firmware < 9.1.0.126\(c00e126r1p7t8\)
cpe:2.3:o:huawei:anne-al00_firmware:*:*:*:*:*:*:*:*
– huawei ares-al00b_firmware < 9.1.0.165\(c00e165r2p5t8\)
cpe:2.3:o:huawei:ares-al00b_firmware:*:*:*:*:*:*:*:*
– huawei ares-al10d_firmware < 9.1.0.165\(c00e165r2p5t8\)
cpe:2.3:o:huawei:ares-al10d_firmware:*:*:*:*:*:*:*:*
– huawei ares-tl00chw_firmware < 8.2.0.163\(c01r2p1\)
cpe:2.3:o:huawei:ares-tl00chw_firmware:*:*:*:*:*:*:*:*
– huawei bla-al00b_firmware < 10.0.0.170\(c786e170r2p4\)
cpe:2.3:o:huawei:bla-al00b_firmware:*:*:*:*:*:*:*:*
– huawei bla-l29c_firmware < 9.1.0.300\(c432e4r1p11t8\)
cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*
– huawei bla-tl00b_firmware < 10.0.0.170\(c01e170r1p4\)
cpe:2.3:o:huawei:bla-tl00b_firmware:*:*:*:*:*:*:*:*
– huawei barca-al00_firmware < 8.0.0.377\(c00\)
cpe:2.3:o:huawei:barca-al00_firmware:*:*:*:*:*:*:*:*
– huawei berkeley-l09_firmware < 9.1.0.351\(c432e5r1p13t8\)
cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*
– huawei berkeley-tl10_firmware < 9.1.0.333\(c01e333r1p1t8\)
cpe:2.3:o:huawei:berkeley-tl10_firmware:*:*:*:*:*:*:*:*
– huawei columbia-al00a_firmware < 8.1.0.186\(c00gt\)
cpe:2.3:o:huawei:columbia-al00a_firmware:*:*:*:*:*:*:*:*
– huawei columbia-l29d_firmware < 9.1.0.325\(c432e4r1p12t8\)
cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*
– huawei cornell-tl10b_firmware < 9.1.0.321\(c01e320r1p1t8\)
cpe:2.3:o:huawei:cornell-tl10b_firmware:*:*:*:*:*:*:*:*
– huawei duke-l09i_firmware < 9.0.1.171\(c675e6r1p5t8\)
cpe:2.3:o:huawei:duke-l09i_firmware:*:*:*:*:*:*:*:*
– huawei dura-al00a_firmware < 1.0.0.190\(c00\)
cpe:2.3:o:huawei:dura-al00a_firmware:*:*:*:*:*:*:*:*
– huawei figo-al00a_firmware < 9.1.0.130\(c00e115r2p8t8\)
cpe:2.3:o:huawei:figo-al00a_firmware:*:*:*:*:*:*:*:*
– huawei florida-al20b_firmware < 9.1.0.128\(c00e112r1p6t8\)
cpe:2.3:o:huawei:florida-al20b_firmware:*:*:*:*:*:*:*:*
– huawei florida-l03_firmware < 9.1.0.154\(c605e7r1p2t8\)
cpe:2.3:o:huawei:florida-l03_firmware:*:*:*:*:*:*:*:*
– huawei florida-l21_firmware < 9.1.0.154\(c605e7r1p2t8\)
cpe:2.3:o:huawei:florida-l21_firmware:*:*:*:*:*:*:*:*
– huawei florida-l22_firmware < 9.1.0.150\(c636e6r1p5t8\)
cpe:2.3:o:huawei:florida-l22_firmware:*:*:*:*:*:*:*:*
– huawei florida-tl10b_firmware < 9.1.0.128\(c01e112r1p6t8\)
cpe:2.3:o:huawei:florida-tl10b_firmware:*:*:*:*:*:*:*:*
– huawei mate_rs_firmware 9.1.0.321\(c786e320r1p1t8\)
cpe:2.3:o:huawei:mate_rs_firmware:9.1.0.321\(c786e320r1p1t8\):*:*:*:*:*:*:*
– huawei p20_firmware < 9.1.0.312\(c00e312r1p1t8\)
cpe:2.3:o:huawei:p20_firmware:*:*:*:*:*:*:*:*
– huawei p20_lite_firmware < 9.1.0.200\(c605e4r1p3t8\)
< 9.1.0.200\(c635e5r1p1t8\)
< 9.1.0.246\(c432e6r1p7t8\)
< 9.1.0.200\(c636e4r1p5t8\)
< 9.1.0.201\(c636e4r1p5t8\)
< 9.1.0.201\(zafc185e4r1p8t8\)
cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:*
Showing 50 of 98. Show the rest
Ecosystem VendorProductAffected versions
– huawei y9_2019_firmware < 9.1.0.297\(c605e4r1p1t8\)
cpe:2.3:o:huawei:y9_2019_firmware:*:*:*:*:*:*:*:*
– huawei nova_2s_firmware < 9.1.0.210\(c01e110r1p9t8\)
cpe:2.3:o:huawei:nova_2s_firmware:*:*:*:*:*:*:*:*
– huawei nova_3_firmware < 9.1.0.351\(c00e351r1p1t8\)
cpe:2.3:o:huawei:nova_3_firmware:*:*:*:*:*:*:*:*
– huawei nova_3e_firmware < 9.1.0.200\(c636e4r1p5t8\)
< 9.1.0.201\(c636e4r1p5t8\)
< 9.1.0.201\(zafc185e4r1p8t8\)
cpe:2.3:o:huawei:nova_3e_firmware:*:*:*:*:*:*:*:*
– huawei honor_view_20_firmware < 10.1.0.214\(c10e5r4p3\)
cpe:2.3:o:huawei:honor_view_20_firmware:*:*:*:*:*:*:*:*
– huawei jakarta-al00a_firmware < 9.1.0.260\(c00e120r2p2\)
cpe:2.3:o:huawei:jakarta-al00a_firmware:*:*:*:*:*:*:*:*
– huawei johnson-tl00d_firmware < 9.1.0.219\(c01e18r3p2t8\)
cpe:2.3:o:huawei:johnson-tl00d_firmware:*:*:*:*:*:*:*:*
– huawei leland-al10b_firmware < 9.1.0.130\(c00e112r2p10t8\)
cpe:2.3:o:huawei:leland-al10b_firmware:*:*:*:*:*:*:*:*
– huawei leland-l21a_firmware < 9.1.0.156\(c185e5r1p5t8\)
cpe:2.3:o:huawei:leland-l21a_firmware:*:*:*:*:*:*:*:*
– huawei leland-l32a_firmware < 9.1.0.153\(c675e6r1p4t8\)
cpe:2.3:o:huawei:leland-l32a_firmware:*:*:*:*:*:*:*:*
– huawei leland-tl10b_firmware < 9.1.0.130\(c01e112r2p10t8\)
cpe:2.3:o:huawei:leland-tl10b_firmware:*:*:*:*:*:*:*:*
– huawei leland-tl10c_firmware < 9.1.0.130\(c01e112r2p10t8\)
cpe:2.3:o:huawei:leland-tl10c_firmware:*:*:*:*:*:*:*:*
– huawei lelandp-al00c_firmware < 9.1.0.130\(c00e112r2p10t8\)
cpe:2.3:o:huawei:lelandp-al00c_firmware:*:*:*:*:*:*:*:*
– huawei lelandp-l22c_firmware < 9.1.0.156\(c636e5r1p5t8\)
cpe:2.3:o:huawei:lelandp-l22c_firmware:*:*:*:*:*:*:*:*
– huawei neo-al00d_firmware < 9.1.0.321\(c786e320r1p1t8\)
cpe:2.3:o:huawei:neo-al00d_firmware:*:*:*:*:*:*:*:*
– huawei princeton-al10b_firmware < 10.1.0.160\(c00e160r2p11\)
cpe:2.3:o:huawei:princeton-al10b_firmware:*:*:*:*:*:*:*:*
– huawei rhone-al00_firmware < 8.0.0.376\(c00\)
cpe:2.3:o:huawei:rhone-al00_firmware:*:*:*:*:*:*:*:*
– huawei stanford-l09_firmware < 9.1.0.211\(c635e2r1p4t8\)
cpe:2.3:o:huawei:stanford-l09_firmware:*:*:*:*:*:*:*:*
– huawei stanford-l09s_firmware < 9.1.0.210\(c432e2r1p5t8\)
cpe:2.3:o:huawei:stanford-l09s_firmware:*:*:*:*:*:*:*:*
– huawei sydney-al00_firmware < 9.1.0.212\(c00e62r1p7t8\)
cpe:2.3:o:huawei:sydney-al00_firmware:*:*:*:*:*:*:*:*
– huawei sydney-tl00_firmware < 9.1.0.212\(c01e62r1p7t8\)
cpe:2.3:o:huawei:sydney-tl00_firmware:*:*:*:*:*:*:*:*
– huawei sydneym-al00_firmware < 9.1.0.212\(c00e62r1p7t8\)
cpe:2.3:o:huawei:sydneym-al00_firmware:*:*:*:*:*:*:*:*
– huawei tony-al00b_firmware < 10.0.0.175\(c00e59r2p11\)
cpe:2.3:o:huawei:tony-al00b_firmware:*:*:*:*:*:*:*:*
– huawei tony-tl00b_firmware < 10.0.0.175\(c01e59r2p11\)
cpe:2.3:o:huawei:tony-tl00b_firmware:*:*:*:*:*:*:*:*
– huawei yale-al00a_firmware < 10.1.0.160\(c00e160r8p12\)
cpe:2.3:o:huawei:yale-al00a_firmware:*:*:*:*:*:*:*:*
– huawei yale-l21a_firmware < 10.1.0.231\(c10e3r3p2\)
cpe:2.3:o:huawei:yale-l21a_firmware:*:*:*:*:*:*:*:*
– huawei yale-tl00b_firmware < 10.1.0.160\(c01e160r8p12\)
cpe:2.3:o:huawei:yale-tl00b_firmware:*:*:*:*:*:*:*:*
– huawei honor_9i_firmware < 9.1.0.130\(c00e112r2p10t8\)
cpe:2.3:o:huawei:honor_9i_firmware:*:*:*:*:*:*:*:*
Debian:12 debian linux < 4.15.4-1
Fix: upgrade to 4.15.4-1
Ubuntu:Pro:14.04:LTS canonical linux-aws < 4.4.0-1058.62
Fix: upgrade to 4.4.0-1058.62
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial < 4.4.0-168.197~14.04.1
Fix: upgrade to 4.4.0-168.197~14.04.1
Ubuntu:16.04:LTS canonical linux < 4.4.0-168.197
Fix: upgrade to 4.4.0-168.197
Ubuntu:16.04:LTS canonical linux-aws < 4.4.0-1098.109
Fix: upgrade to 4.4.0-1098.109
Ubuntu:16.04:LTS canonical linux-azure < 4.15.0-1013.13~16.04.2
Fix: upgrade to 4.15.0-1013.13~16.04.2
Ubuntu:16.04:LTS canonical linux-gcp < 4.15.0-1014.14~16.04.1
Fix: upgrade to 4.15.0-1014.14~16.04.1
Ubuntu:16.04:LTS canonical linux-hwe < 4.15.0-24.26~16.04.1
Fix: upgrade to 4.15.0-24.26~16.04.1
Ubuntu:16.04:LTS canonical linux-kvm < 4.4.0-1062.69
Fix: upgrade to 4.4.0-1062.69
Ubuntu:16.04:LTS canonical linux-raspi2 < 4.4.0-1125.134
Fix: upgrade to 4.4.0-1125.134
Ubuntu:16.04:LTS canonical linux-snapdragon < 4.4.0-1129.137
Fix: upgrade to 4.4.0-1129.137
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:FIPS-updates:16.04:LTS canonical linux-fips < 4.4.0-1025.30
Fix: upgrade to 4.4.0-1025.30
Ubuntu:18.04:LTS canonical linux-snapdragon < 4.15.0-1053.57
Fix: upgrade to 4.15.0-1053.57
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Original advisory text
Android Kernel Use-After-Free Vulnerability
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
References
Fix within
Internet-facing 3 days
and check for signs of compromise
Internal 14 days
  • Known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
72% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published11 Oct 2019
Updated9 Oct 2026
First seen6 Mar 2026
Sources
CVE-2019-2215 · CISA KEV
CVE-2019-2215 · NVD
DEBIAN-CVE-2019-2215 · OSV
UBUNTU-CVE-2019-2215 · OSV
Track software like this
Free during beta