CVE-2026-58941: Critical Out of Bounds Read/Write Vulnerability in Android Linux Kernel
Summary
CVE-2026-58941: In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. Affects :linux_kernel: versions >= :0, < :2026-09-05. Fixed in :2026-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Android Linux Kernel is a core component of the Android operating system, responsible for managing hardware resources and providing essential services to applications. It plays a crucial role in system stability, performance, and security. However, vulnerabilities in the kernel can lead to severe security risks, including privilege escalation and unauthorized access to system resources.
Vulnerability Detail
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This vulnerability can lead to local escalation of privilege without requiring additional execution privileges. User interaction is not needed for exploitation, making it particularly dangerous as it can be exploited by malicious applications running on the device.
How To Fix
Minimum fixed version
:2026-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patches as soon as possible.
Conclusion
The CVE-2026-58941 vulnerability in the Android Linux Kernel poses a significant risk due to its potential for local privilege escalation without user interaction. It is essential to apply the available patches promptly to secure your system against this threat.
See every vulnerability recorded for :linux_kernel: →
FAQ
CVE-2026-58941 is a critical vulnerability in the Android Linux Kernel that allows for out of bounds read/write operations, potentially leading to local privilege escalation.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities in real-time.
The primary risk is local escalation of privilege, which could allow malicious applications to gain unauthorized access to system resources and sensitive data.
No, user interaction is not needed for exploitation, making this vulnerability particularly dangerous.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to the patched version as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
