In ep_free of eventpoll.c, a race condition can lead to a use‑after‑free, enabling a local attacker to raise privileges to a higher level without needing additional execution permissions. The flaw is exploitable without user interaction, meaning any process with local access can potentially trigger the vulnerability and elevate its own privilege.

The affected product is Google Android, as identified by the CNA. No specific OS versions are listed, so the flaw is presumed to exist in any Android build that includes the vulnerable eventpoll.c code until patched by the manufacturer or Android updates.

The CVSS score of 7 highlights the severity of the vulnerability. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, so the exact exploitation likelihood cannot be quantified. However, the CVE can be triggered without user interaction and could allow an attacker who already has local presence to elevate privileges to system level. The absence of a publicly documented exploit or patch means organizations should treat the risk as potentially high until a vendor fix is deployed.