
Cloud Vulnerability DB
A community-led vulnerabilities database
In the l2tp subsystem of the Android kernel, a use-after-free vulnerability was discovered due to a race condition (CVE-2020-27067). The vulnerability was disclosed in December 2020 and affects Android kernel versions. This security flaw could potentially lead to local privilege escalation on affected Android devices (Android Bulletin).
The vulnerability exists in the l2tp (Layer 2 Tunneling Protocol) subsystem of the Android kernel. It is characterized as a use-after-free condition that occurs due to a race condition in the system. The issue has been assigned Android ID A-152409173. The vulnerability requires System execution privileges for exploitation (CVE Mitre).
If successfully exploited, this vulnerability could lead to local escalation of privilege on affected Android devices. The attacker would gain elevated system privileges, potentially compromising the security of the affected device (CVE Mitre).
The vulnerability requires System execution privileges for exploitation. User interaction is not needed for exploitation, making it potentially more dangerous in scenarios where an attacker has already gained initial access to the system (Android Bulletin).
The vulnerability was addressed in the Android Security Bulletin of December 2020. Users should ensure their Android devices are updated with the latest security patches to mitigate this vulnerability (Android Bulletin).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."