EUVD-2026-74027
GHSA-qf3c-h5m5-hf28
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local kernel race condition requires precise timing (AC:H) and low-privilege shell access (AV:L/PR:L), delivering full kernel compromise (C:H/I:H/A:H) without scope change.
Primary rating from Vendor (android).
CVSS VectorVendor: android
Lifecycle Timeline
3DescriptionCVE.org
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AnalysisAI
Local privilege escalation in the Android common kernel's alloc.c memory allocation functions allows a low-privileged local user to gain full read/write access to kernel memory via a race condition. Multiple functions in alloc.c are affected, with successful exploitation yielding complete confidentiality, integrity, and availability compromise of the device. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local, low-privilege code execution on the Android device - for example, via a malicious installed application, ADB shell, or a prior user-space exploit stage. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 score with AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H accurately captures a kernel race condition that, while locally constrained and timing-sensitive, delivers a catastrophic impact when won. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the September 2026 Android Security Bulletin patch (patch level 2026-09-01) as distributed by device OEMs. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Android devices in your organization and identify which are running vulnerable versions of the Android common kernel; enable monitoring and alerting for suspicious kernel access attempts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today