CVE-2011-1823 · netVigilance record NV22-0501

Android OS Privilege Escalation

past due

What to do

Apply updates per vendor instructions.

CISA deadline 2022-09-29 · passed 3 years 11 months ago · applies to US federal civilian agencies; used elsewhere as a reference SLA

What happened

The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.

Who is affected

Android Android OS. Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.

Weakness class: CWE-189.

Timeline

2022-09-08
Added to CISA KEVExploitation in the wild confirmed by CISA
2022-09-29
CISA remediation deadlinepassed 3 years 11 months ago

Sources

NVD entry for CVE-2011-1823 nvd.nist.gov/vuln/detail/CVE-2011-1823
CISA Known Exploited Vulnerabilities catalog www.cisa.gov/known-exploited-vulnerabilities-catalog
android.googlesource.com android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e
nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2011-1823