PT-2020-1251 · Google+4 · Android Kernel+4

Published 2020-10-01 · Updated 2025-09-29 · CVE-2020-0423

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) Android kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the binder release work function of binder.c due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Linux kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Android kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Use After Free

Weakness Enumeration

CWE-667

CWE-416

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ASB-A-161151868

BDU:2025-00842

CVE-2020-0423

DLA-2483-1

MGASA-2021-0030

MGASA-2021-0031

OESA-2021-1086

OESA-2021-1087

USN-4658-1

USN-4658-2

USN-4659-1

USN-4680-1

USN-4912-1

Affected Products

Android Kernel

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 96

• 🔥 https://github.com/sparrow-labz/CVE-2020-0423 · Exploit
• 🔥 https://github.com/wired0ut/CVE-2020-0423 · Exploit
• https://ubuntu.com/security/CVE-2020-25645 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-0423 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-16089 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-0423 · Security Note
• https://osv.dev/vulnerability/ASB-A-161151868 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20177 · Security Note
• https://ubuntu.com/security/CVE-2020-27777 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4658-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00842 · Security Note
• https://ubuntu.com/security/CVE-2020-25284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3348 · Security Note
• https://osv.dev/vulnerability/USN-4658-1 · Vendor Advisory