In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
History
Wed, 11 Nov 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Privilege Escalation via Stale Stream Table Entry Bypass in Android arm-smmu-v3 Driver | Local Privilege Escalation via Stale Stream Table Entries in arm‑smmu‑v3 Driver |
Wed, 11 Nov 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Privilege Escalation via Stale Stream Table Entry Bypass in Android arm-smmu-v3 Driver | |
| First Time appeared |
Google
Google android |
|
| Weaknesses | CWE-285 | |
| Vendors & Products |
Google
Google android |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Status: PUBLISHED
Assigner: Google_Devices
Published: 2026-11-10T19:20:11.752Z
Updated: 2026-11-10T19:20:11.752Z
Reserved: 2025-10-23T08:45:24.756Z
Link: CVE-2026-0178
No data.
Status : Awaiting Analysis
Published: 2026-11-10T20:17:20.623
Modified: 2026-11-10T21:46:41.807
Link: CVE-2026-0178
No data.
ReportizFlow