A-498749316: Use After Free

Q: Who can exploit this issue?

An attacker needs local access to the affected Android Linux kernel. No additional execution privileges or user interaction are required.

Q: What is the likely impact of successful exploitation?

Successful exploitation can cause memory corruption through a use-after-free condition and may allow local escalation of privilege.

Q: Which component should be investigated for remediation?

The issue is in fuse_backing_mmap in backing.c, within the Android Linux kernel. The provided references include two upstream Android kernel changes associated with the issue.

Published Nov 1, 2026

Updated

In fusebackingmmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:linux_kernel:>=:0<:2026-11-05

:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local access to the affected Android Linux kernel. No additional execution privileges or user interaction are required.

What is the likely impact of successful exploitation?

Successful exploitation can cause memory corruption through a use-after-free condition and may allow local escalation of privilege.

Which component should be investigated for remediation?

The issue is in fuse_backing_mmap in backing.c, within the Android Linux kernel. The provided references include two upstream Android kernel changes associated with the issue.

A-498749316: Use After Free

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Which component should be investigated for remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Which component should be investigated for remediation?