Out-of-Bounds Read Vulnerability in Android Kernel by Google

CVE-2026-59048

What is CVE-2026-59048?

The vulnerability exists within the Android Kernel's rb_cpu_init function located in trace.c, where an improper bounds check can lead to an out-of-bounds read. This flaw permits a local attacker to disclose sensitive information without requiring any additional execution privileges or user interaction. Addressing this vulnerability is critical to maintaining the integrity and confidentiality of system data.

References