Out-of-Bounds Write Vulnerability in Android Kernel Components
CVE-2026-59046
Currently unrated
What is CVE-2026-59046?
The vulnerability arises from an out-of-bounds write in the pkvm_guest_relinquish_to_host function within mem_protect.c, caused by insufficient input validation. This flaw can potentially lead to a local denial of service, allowing an attacker to disrupt system operations without the need for elevated privileges or user interaction, making it a significant security concern for affected Android devices.
Affected Version(s)
Android Android kernel