High severity8.4NVD Advisory· Published Mar 2, 2026· Updated Jun 17, 2026

CVE-2026-0028

Description

In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Androidv52 versions
Android kernel+ 1 more
- (no CPE)range: Android kernel
- cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Android X86/android-x86llm-fuzzy

Patches

Vulnerability mechanics

References

android.googlesource.com/kernel/common/+/986614312222d4b3bdcf16840cdb4abdaed8a42dnvdPatchProduct
android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20nvdPatchProduct
android.googlesource.com/kernel/common/+/f3a4b4d4a1fe2aface7de74ac257b8705b6de472nvdPatchProduct
source.android.com/docs/security/bulletin/2026/2026-03-01nvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000