A race condition in several functions of dma-buf.c can lead a local attacker to use a freed buffer, enabling escalation of privilege without requiring any additional execution privileges. The flaw is a classic use-after-free scenario, allowing malicious code to manipulate memory after it has been deallocated. The impact is the ability of a local actor to gain higher privileges on the device, potentially compromising all data and system integrity.

Android kernel deployments from Google, specifically those containing the unpatched dma-buf.c code. The issue applies to all Android devices running affected kernel versions that include the vulnerable copy of dma-buf.c. No specific version numbers are provided in the vendor data.

The exploitation requires a local user context and no user interaction beyond triggering the race; any local user could potentially exploit it. The EPSS score is not available, and the vulnerability is not listed in KEV, but the absence of public metrics does not diminish the risk of local privilege escalation. The CVSS score is not disclosed, yet the identified use-after-free indicates a serious security flaw that should be addressed immediately.