A-511554706: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue could allow local escalation of privilege without requiring additional execution privileges. User interaction is not required.

Q: What component is implicated by the available information?

The issue is described in smmu_find_ste in smmu.c and involves stale translation lookaside buffer entries being retained across stream identifiers.

Published Nov 1, 2026

Updated

In smmufindste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue could allow local escalation of privilege without requiring additional execution privileges. User interaction is not required.

What component is implicated by the available information?

The issue is described in smmu_find_ste in smmu.c and involves stale translation lookaside buffer entries being retained across stream identifiers.

A-511554706: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What component is implicated by the available information?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What component is implicated by the available information?