CVE-2026-58846: Linux Kernel Android Package Local Privilege Escalation Vulnerability
Summary
CVE-2026-58846: In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. Affects :linux_kernel: versions >= :0, < :2026-09-05. Fixed in :2026-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Android operating system, responsible for managing hardware resources and providing essential services to applications. It is designed for efficiency and security, but vulnerabilities can arise due to complex interactions between hardware and software. This specific vulnerability affects the IOMMU (Input-Output Memory Management Unit) functionality, which is crucial for memory protection and virtualization in Android devices.
Vulnerability Detail
In the function kvm_iommu_map_sg within iommu.c, a use-after-free vulnerability exists due to a missing permission check. This flaw allows an attacker with local access to escalate their privileges without needing additional execution rights. The exploitation of this vulnerability could lead to unauthorized access to sensitive system resources, potentially compromising the integrity and confidentiality of the device.
How To Fix
Minimum fixed version
:2026-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2026-58846 represents a critical vulnerability in the Linux kernel for Android, allowing local privilege escalation due to a use-after-free error. Users are urged to update their kernel to the patched version to safeguard their devices from potential exploitation.
See every vulnerability recorded for :linux_kernel: →
FAQ
CVE-2026-58846 is a vulnerability in the Linux kernel affecting Android devices, which allows local privilege escalation due to a use-after-free error.
Any Android device running a vulnerable version of the Linux kernel prior to the patch released on September 5, 2026, is at risk.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could allow an attacker to gain elevated privileges, potentially leading to unauthorized access to sensitive data and system resources.
Currently, there are no specific workarounds available. It is recommended to apply the patch as soon as possible to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
