A double free vulnerability in the Android kernel allows a local attacker to achieve privilege escalation, posing a significant security risk to affected devices.

The vulnerability exists in the aocc_read function within aoc_channel_dev.c due to improper locking mechanisms. A local attacker with low privileges can trigger a double free condition, which may result in local privilege escalation without requiring user interaction.

The ability for a local attacker to escalate privileges to the level of the kernel poses a severe threat to the confidentiality, integrity, and availability of the affected device. With a CVSS score of 7.8, this high-severity flaw could allow an attacker to bypass standard security controls, access sensitive user data, or gain persistent control over the mobile device.

Immediate Action: Users and administrators should apply the latest Android security updates provided by Google or the specific device manufacturer as documented in the December 2025 Pixel Security Bulletin.

Proactive Monitoring: Security teams should monitor system logs for signs of unexpected kernel crashes or unauthorized attempts to access restricted system resources.

Compensating Controls: Ensure that device-level security policies are enforced and that only trusted applications are installed to minimize the risk of a local attacker gaining the initial foothold required to trigger this exploit.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Given the potential for local privilege escalation, this vulnerability should be treated with high priority. Organizations managing fleets of Android devices should verify that the December 2025 security patch level is deployed across all endpoints to mitigate the risk of exploitation.