Out-of-Bounds Write Vulnerability in Android Kernel by Google

CVE-2026-59042

What is CVE-2026-59042?

A potential out-of-bounds write vulnerability exists within the Android Kernel, specifically in the __pkvm_pages_to_ppages function of mmu.c. This flaw is due to a race condition that can allow an attacker to escalate privileges locally. Notably, the attack does not require any user interaction or special execution privileges, creating a serious risk for affected systems. Timely patching and monitoring are recommended to mitigate any potential exploitation.

References