In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Google Android unaffected
Version Status Constraints
Android kernel affected —

No data.

No data.

No data.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://android.googlesource.com/kernel/common/+/01ff2abe4905798e330a70f2970ee33a44419d24 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/22ae719f35b14f88e551f0e858a1087a4b721204 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/9f965dd09cad69d0064f8a862d68cfc2163ba9d3 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/acce19149cb8ebe92218d0e66c08bc36552ddbdf cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/bd9aaec66cf50ea3ade2b537d9b730e40fe512e6 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/c47ebb7427d5011de67b526eac67b42da640bdc5 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/e10fb80c80387aa1f26695b57df95afe0ef00481 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/eb970aae88c0f45056f4501b7815a9b5c7ab0435 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/f0a2d3087b73b442b69fe0a9617ab920400abe15 cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/f6510cfbc728061d7a8d4ea4ac91e5fc270aaf6b cve-icon cve-icon
https://android.googlesource.com/kernel/common/+/f89e83e20aa69fbdd5b2f2de284dafcaadbda7c7 cve-icon cve-icon
https://source.android.com/docs/security/bulletin/2026/2026-11-01 cve-icon cve-icon
History

Mon, 02 Nov 2026 20:15:00 +0000

Type Values Removed Values Added
Description In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published:

Updated: 2026-11-02T19:55:11.873Z

Reserved: 2026-07-02T06:28:02.376Z

Link: CVE-2026-59045

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-02T20:17:57.820

Modified: 2026-11-02T20:17:57.820

Link: CVE-2026-59045

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.