CVEvulnerability
CVE-2019-2215
CISA Known Exploited Vulnerability
Android Kernel Use-After-Free Vulnerability — Android Android Kernel
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
- Added to KEV
- 2021-11-03
- Remediation due
- 2022-05-03
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2019-2215
- Status
- Analyzed
- Published
- 2019-10-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Affected configurations
• google android
• debian debian linux 8.0
• canonical ubuntu linux 16.04
• netapp cloud backup
• netapp data availability services
• netapp hci management node
• netapp service processor
• netapp solidfire
• netapp steelstore cloud integrated storage
• netapp solidfire baseboard management controller firmware
• netapp aff baseboard management controller firmware
• netapp a320 firmware
• netapp c190 firmware
• netapp a220 firmware
• netapp fas2720 firmware
• netapp fas2750 firmware
• netapp a800 firmware
• netapp h300s firmware
• netapp h500s firmware
• netapp h700s firmware
• netapp h410s firmware
• netapp h410c firmware
• netapp h610s firmware
• huawei alp-al00b firmware (< 10.0.0.162\(c00e156r2p4\))
• huawei alp-tl00b firmware (< 10.0.0.162\(c01e156r1p4\))
• huawei anne-al00 firmware (< 9.1.0.126\(c00e126r1p7t8\))
• huawei ares-al00b firmware (< 9.1.0.165\(c00e165r2p5t8\))
• huawei ares-al10d firmware (< 9.1.0.165\(c00e165r2p5t8\))
• huawei ares-tl00chw firmware (< 8.2.0.163\(c01r2p1\))
• huawei bla-al00b firmware (< 10.0.0.170\(c786e170r2p4\))
• huawei bla-l29c firmware (< 9.1.0.300\(c432e4r1p11t8\))
• huawei bla-tl00b firmware (< 10.0.0.170\(c01e170r1p4\))
• huawei barca-al00 firmware (< 8.0.0.377\(c00\))
• huawei berkeley-l09 firmware (< 9.1.0.351\(c432e5r1p13t8\))
• huawei berkeley-tl10 firmware (< 9.1.0.333\(c01e333r1p1t8\))
• huawei columbia-al00a firmware (< 8.1.0.186\(c00gt\))
• huawei columbia-l29d firmware (< 9.1.0.325\(c432e4r1p12t8\))
• huawei cornell-tl10b firmware (< 9.1.0.321\(c01e320r1p1t8\))
• huawei duke-l09i firmware (< 9.0.1.171\(c675e6r1p5t8\))
• huawei dura-al00a firmware (< 1.0.0.190\(c00\))
• huawei figo-al00a firmware (< 9.1.0.130\(c00e115r2p8t8\))
• huawei florida-al20b firmware (< 9.1.0.128\(c00e112r1p6t8\))
• huawei florida-l03 firmware (< 9.1.0.154\(c605e7r1p2t8\))
• huawei florida-l21 firmware (< 9.1.0.154\(c605e7r1p2t8\))
• huawei florida-l22 firmware (< 9.1.0.150\(c636e6r1p5t8\))
• huawei florida-tl10b firmware (< 9.1.0.128\(c01e112r1p6t8\))
• huawei mate rs firmware 9.1.0.321\(c786e320r1p1t8\)
• huawei p20 firmware (< 9.1.0.312\(c00e312r1p1t8\))
• huawei p20 lite firmware (< 9.1.0.200\(c605e4r1p3t8\))
• huawei p20 lite firmware (< 9.1.0.200\(c635e5r1p1t8\))
• huawei p20 lite firmware (< 9.1.0.246\(c432e6r1p7t8\))
• huawei y9 2019 firmware (< 9.1.0.297\(c605e4r1p1t8\))
• huawei nova 2s firmware (< 9.1.0.210\(c01e110r1p9t8\))
• huawei nova 3 firmware (< 9.1.0.351\(c00e351r1p1t8\))
• huawei nova 3e firmware (< 9.1.0.200\(c636e4r1p5t8\))
• huawei p20 lite firmware (< 9.1.0.200\(c636e4r1p5t8\))
• huawei p20 lite firmware (< 9.1.0.201\(c636e4r1p5t8\))
• huawei nova 3e firmware (< 9.1.0.201\(c636e4r1p5t8\))
• huawei nova 3e firmware (< 9.1.0.201\(zafc185e4r1p8t8\))
• huawei p20 lite firmware (< 9.1.0.201\(zafc185e4r1p8t8\))
… and 24 more
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html Patch, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Oct/38 Mailing List, Third Party Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Nov/11 Mailing List, Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191031-0005/ Third Party Advisory
- https://source.android.com/security/bulletin/2019-10-01 Vendor Advisory
- https://usn.ubuntu.com/4186-1/ Third Party Advisory
- http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html Patch, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Oct/38 Mailing List, Third Party Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-binder-en Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Nov/11 Mailing List, Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191031-0005/ Third Party Advisory
- https://source.android.com/security/bulletin/2019-10-01 Vendor Advisory
- https://usn.ubuntu.com/4186-1/ Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-2215 US Government Resource