---
id: "CVE-2026-55319"
page: "https://infrastack.ai/live/CVE-2026-55319"
kind: "vulnerability"
aliases: ["CVE-2026-55319"]
title: "Android kernel: thread creation failure corrupts heap, enabling local privilege escalation"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["android", "infrastructure", "kernel", "linux"]
not_affected_if: []
published_at: "2026-11-10T20:19:13+00:00"
first_seen_at: "2026-11-10T20:46:05+00:00"
updated_at: "2026-11-10T20:54:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55319", "first_seen_at": "2026-11-10T20:46:05+00:00"}]
exploit_sources: []
---

# Android kernel: thread creation failure corrupts heap, enabling local privilege escalation

Link for people: https://infrastack.ai/live/CVE-2026-55319 (this .md is for agents)

A flaw in the kernel's thread_free routine can corrupt kernel heap metadata when thread creation fails. A local app or process could use this to escalate privileges to kernel level without extra permissions or user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-55319

## From the sources

In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_