VYPR
← All advisories
High severity8.4NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026

CVE-2025-36920

CVE-2025-36920

Description

In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

3
  • Google/Android2 versions
    cpe:2.3:o:google:android:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
    • (no CPE)range: Android kernel
  • Google/Pixelllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.