CVE-2019-2215: Android Kernel Use-After-Free Vulnerability
Published Oct 7, 2019
·Updated
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
Other sources
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
— CISA
Affected Software
162 affected componentsFixes available
Android Android Kernel
Google Android
Google Android
Debian Debian Linux=8.0
Canonical Ubuntu Linux=16.04
NetApp Cloud Backup
NetApp Data Availability Services
NetApp Hci Management Node
NetApp Service Processor
NetApp Solidfire
NetApp Steelstore Cloud Integrated Storage
All of the following
NetApp Solidfire Baseboard Management Controller Firmware
NetApp Solidfire Baseboard Management Controller
All of the following
NetApp Aff Baseboard Management Controller Firmware
NetApp Aff Baseboard Management Controller=a700s
All of the following
NetApp A320 Firmware
NetApp A320
All of the following
NetApp C190 Firmware
NetApp C190
All of the following
NetApp A220 Firmware
NetApp A220
All of the following
NetApp Fas2720 Firmware
NetApp Fas2720
All of the following
NetApp Fas2750 Firmware
NetApp Fas2750
All of the following
NetApp A800 Firmware
NetApp A800
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
All of the following
NetApp H610s Firmware
NetApp H610s
All of the following
Huawei Alp-al00b Firmware<10.0.0.162\(c00e156r2p4\)
Huawei ALP-AL00B
All of the following
Huawei Alp-tl00b Firmware<10.0.0.162\(c01e156r1p4\)
Huawei ALP-TL00B
All of the following
Huawei Anne-al00 Firmware<9.1.0.126\(c00e126r1p7t8\)
Huawei Anne-AL00
All of the following
Huawei Ares-al00b Firmware<9.1.0.165\(c00e165r2p5t8\)
Huawei Ares-al00b
All of the following
Huawei Ares-al10d Firmware<9.1.0.165\(c00e165r2p5t8\)
Huawei Ares-al10d
All of the following
Huawei Ares-tl00chw Firmware<8.2.0.163\(c01r2p1\)
Huawei Ares-tl00chw
All of the following
Huawei Bla-al00b Firmware<10.0.0.170\(c786e170r2p4\)
Huawei BLA-AL00B
All of the following
Huawei Bla-l29c Firmware<9.1.0.300\(c432e4r1p11t8\)
Huawei BLA-L29C
All of the following
Huawei Bla-tl00b Firmware<10.0.0.170\(c01e170r1p4\)
Huawei BLA-TL00B
All of the following
Huawei Barca-al00 Firmware<8.0.0.377\(c00\)
Huawei Barca-al00
All of the following
Huawei Berkeley-l09 Firmware<9.1.0.351\(c432e5r1p13t8\)
Huawei Berkeley-L09
All of the following
Huawei Berkeley-tl10 Firmware<9.1.0.333\(c01e333r1p1t8\)
Huawei Berkeley-tl10
All of the following
Huawei Columbia-al00a Firmware<8.1.0.186\(c00gt\)
Huawei Columbia-al00a
All of the following
Huawei Columbia-l29d Firmware<9.1.0.325\(c432e4r1p12t8\)
Huawei Columbia-L29D
All of the following
Huawei Cornell-tl10b Firmware<9.1.0.321\(c01e320r1p1t8\)
Huawei Cornell-tl10b
All of the following
Huawei Duke-l09i Firmware<9.0.1.171\(c675e6r1p5t8\)
Huawei Duke-l09i
All of the following
Huawei Dura-al00a Firmware<1.0.0.190\(c00\)
Huawei Dura-al00a
All of the following
Huawei Figo-al00a Firmware<9.1.0.130\(c00e115r2p8t8\)
Huawei Figo-al00a
All of the following
Huawei Florida-al20b Firmware<9.1.0.128\(c00e112r1p6t8\)
Huawei Florida-al20b
All of the following
Huawei Florida-l03 Firmware<9.1.0.154\(c605e7r1p2t8\)
Huawei Florida-l03
All of the following
Huawei Florida-l21 Firmware<9.1.0.154\(c605e7r1p2t8\)
Huawei Florida-l21
All of the following
Huawei Florida-l22 Firmware<9.1.0.150\(c636e6r1p5t8\)
Huawei Florida-l22
All of the following
Huawei Florida-tl10b Firmware<9.1.0.128\(c01e112r1p6t8\)
Huawei Florida-tl10b
All of the following
Huawei Mate Rs Firmware=9.1.0.321\(c786e320r1p1t8\)
Huawei Mate RS
All of the following
Huawei P20 Firmware<9.1.0.312\(c00e312r1p1t8\)
Huawei P20
All of the following
Huawei P20 Lite Firmware<9.1.0.200\(c605e4r1p3t8\)
Huawei P20 Lite
All of the following
Huawei P20 Lite Firmware<9.1.0.200\(c635e5r1p1t8\)
Huawei P20 Lite
All of the following
Huawei P20 Lite Firmware<9.1.0.246\(c432e6r1p7t8\)
Huawei P20 Lite
All of the following
Huawei Y9 2019 Firmware<9.1.0.297\(c605e4r1p1t8\)
Huawei Y9 2019
All of the following
Huawei Nova 2s Firmware<9.1.0.210\(c01e110r1p9t8\)
Huawei Nova 2s
All of the following
Huawei Nova 3 Firmware<9.1.0.351\(c00e351r1p1t8\)
Huawei Nova 3
All of the following
Huawei Nova 3e Firmware<9.1.0.200\(c636e4r1p5t8\)
Huawei Nova 3e
All of the following
Huawei P20 Lite Firmware<9.1.0.200\(c636e4r1p5t8\)
Huawei P20 Lite
All of the following
Huawei P20 Lite Firmware<9.1.0.201\(c636e4r1p5t8\)
Huawei P20 Lite
All of the following
Huawei Nova 3e Firmware<9.1.0.201\(c636e4r1p5t8\)
Huawei Nova 3e
All of the following
Huawei Nova 3e Firmware<9.1.0.201\(zafc185e4r1p8t8\)
Huawei Nova 3e
All of the following
Huawei P20 Lite Firmware<9.1.0.201\(zafc185e4r1p8t8\)
Huawei P20 Lite
All of the following
Huawei Honor View 20 Firmware<10.1.0.214\(c10e5r4p3\)
Huawei Honor View 20
All of the following
Huawei Jakarta-al00a Firmware<9.1.0.260\(c00e120r2p2\)
Huawei Jakarta-al00a
All of the following
Huawei Johnson-tl00d Firmware<9.1.0.219\(c01e18r3p2t8\)
Huawei Johnson-tl00d
All of the following
Huawei Leland-al10b Firmware<9.1.0.130\(c00e112r2p10t8\)
Huawei Leland-al10b
All of the following
Huawei Leland-l21a Firmware<9.1.0.156\(c185e5r1p5t8\)
Huawei Leland-l21a
All of the following
Huawei Leland-l32a Firmware<9.1.0.153\(c675e6r1p4t8\)
Huawei Leland-l32a
All of the following
Huawei Leland-tl10b Firmware<9.1.0.130\(c01e112r2p10t8\)
Huawei Leland-tl10b
All of the following
Huawei Leland-tl10c Firmware<9.1.0.130\(c01e112r2p10t8\)
Huawei Leland-tl10c
All of the following
Huawei Lelandp-al00c Firmware<9.1.0.130\(c00e112r2p10t8\)
Huawei Lelandp-al00c
All of the following
Huawei Lelandp-l22c Firmware<9.1.0.156\(c636e5r1p5t8\)
Huawei LelandP-L22C
All of the following
Huawei Neo-al00d Firmware<9.1.0.321\(c786e320r1p1t8\)
Huawei NEO-AL00D
All of the following
Huawei Princeton-al10b Firmware<10.1.0.160\(c00e160r2p11\)
Huawei Princeton-AL10B
All of the following
Huawei Rhone-al00 Firmware<8.0.0.376\(c00\)
Huawei Rhone-AL00
All of the following
Huawei Stanford-l09 Firmware<9.1.0.211\(c635e2r1p4t8\)
Huawei Stanford-l09
All of the following
Huawei Stanford-l09s Firmware<9.1.0.210\(c432e2r1p5t8\)
Huawei Stanford-L09S
All of the following
Huawei Sydney-al00 Firmware<9.1.0.212\(c00e62r1p7t8\)
Huawei Sydney-AL00
All of the following
Huawei Sydney-tl00 Firmware<9.1.0.212\(c01e62r1p7t8\)
Huawei Sydney-tl00
All of the following
Huawei Sydneym-al00 Firmware<9.1.0.212\(c00e62r1p7t8\)
Huawei SydneyM-AL00
All of the following
Huawei Tony-al00b Firmware<10.0.0.175\(c00e59r2p11\)
Huawei Tony-AL00B
All of the following
Huawei Tony-tl00b Firmware<10.0.0.175\(c01e59r2p11\)
Huawei Tony-TL00B
All of the following
Huawei Yale-al00a Firmware<10.1.0.160\(c00e160r8p12\)
Huawei Yale-al00a
All of the following
Huawei Yale-l21a Firmware<10.1.0.231\(c10e3r3p2\)
Huawei Yale-L21A
All of the following
Huawei Yale-tl00b Firmware<10.1.0.160\(c01e160r8p12\)
Huawei Yale-TL00B
All of the following
Huawei Honor 9i Firmware<9.1.0.130\(c00e112r2p10t8\)
Huawei Honor 9i
debian/linux
5.10.223-15.10.262-16.1.176-16.1.180-16.12.94-16.12.101-17.1.7-17.1.8-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1
Event History
Oct 7, 2019
CVE Published
via Android·12:00 AM
Oct 11, 2019
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Jan 11, 2024
Data Sourced
via Launchpad·11:27 PM
Description
Jul 5, 2026
Data Sourced
via Ubuntu·10:04 AM
RemedyDescriptionSeverityAffected Software
Aug 12, 2026
Data Sourced
via Debian·10:33 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2019-2215?
CVE-2019-2215 is a use-after-free vulnerability in the Android Kernel.
2
How does CVE-2019-2215 affect Android Kernel?
CVE-2019-2215 allows an elevation of privilege from an application to the Linux Kernel.
3
What is the severity of CVE-2019-2215?
CVE-2019-2215 has a severity rating of high.
4
How can CVE-2019-2215 be exploited?
Exploiting CVE-2019-2215 requires either the installation of a malicious local application or a separate vulnerability in a network fa…
5
Are there any references for CVE-2019-2215?
References for CVE-2019-2215 can be found at the following links: [Link 1](https://source.android.com/security/bulletin/2019-10-01), [Link 2](http://seclists.org/fulldisclosure/2019/Oct/38), [Link 3](http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html).