CVE-2020-27067
Linux Kernel vulnerability analysis and mitigation

Overview

In the l2tp subsystem of the Android kernel, a use-after-free vulnerability was discovered due to a race condition (CVE-2020-27067). The vulnerability was disclosed in December 2020 and affects Android kernel versions. This security flaw could potentially lead to local privilege escalation on affected Android devices (Android Bulletin).

Technical details

The vulnerability exists in the l2tp (Layer 2 Tunneling Protocol) subsystem of the Android kernel. It is characterized as a use-after-free condition that occurs due to a race condition in the system. The issue has been assigned Android ID A-152409173. The vulnerability requires System execution privileges for exploitation (CVE Mitre).

Impact

If successfully exploited, this vulnerability could lead to local escalation of privilege on affected Android devices. The attacker would gain elevated system privileges, potentially compromising the security of the affected device (CVE Mitre).

Exploitability

The vulnerability requires System execution privileges for exploitation. User interaction is not needed for exploitation, making it potentially more dangerous in scenarios where an attacker has already gained initial access to the system (Android Bulletin).

Mitigation and workarounds

The vulnerability was addressed in the Android Security Bulletin of December 2020. Users should ensure their Android devices are updated with the latest security patches to mitigate this vulnerability (Android Bulletin).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-93189HIGH8.8
  • Linux Kernel logoLinux Kernel
  • linux-azure-fips
NoYesSep 17, 2026
CVE-2026-93188MEDIUM6.5
  • Linux Kernel logoLinux Kernel
  • linux-nvidia-tegra-5.15
NoYesSep 17, 2026
CVE-2026-93182NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux-fips
NoYesSep 17, 2026
CVE-2026-93181NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux-azure-4.15
NoNoSep 17, 2026
CVE-2026-93174NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux-azure-fde-6.14
NoYesSep 17, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management