CVE-2026-56909: Android/:unknown: vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue is locally exploitable and requires System execution privileges. No user interaction is needed.

Q: What is the potential impact after exploitation?

Non-secure software may be able to modify voltage control registers because permission checks are missing. This can result in local escalation of privilege.

Published Nov 1, 2026

Updated

In multiple functions of sswrpcpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is locally exploitable and requires System execution privileges. No user interaction is needed.

What is the potential impact after exploitation?

Non-secure software may be able to modify voltage control registers because permission checks are missing. This can result in local escalation of privilege.

CVE-2026-56909: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact after exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact after exploitation?