CVE-2026-56916: Race Condition

Q: What level of access does an attacker need to exploit this issue?

The issue requires local execution privileges. It is described as a potential local escalation of privilege, so exploitation is relevant to an attacker who can already run code locally.

Q: Is user interaction required for exploitation?

Yes. The available data states that user interaction is required for exploitation.

Q: Which software versions or configurations are affected?

The affected software is identified only as Android, with no version, device, configuration, or patch-level details provided. The available data does not establish whether default configurations are affected.

Published Nov 1, 2026

Updated

In vqueuegetavailbuflocked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue requires local execution privileges. It is described as a potential local escalation of privilege, so exploitation is relevant to an attacker who can already run code locally.

Is user interaction required for exploitation?

Yes. The available data states that user interaction is required for exploitation.

Which software versions or configurations are affected?

The affected software is identified only as Android, with no version, device, configuration, or patch-level details provided. The available data does not establish whether default configurations are affected.

CVE-2026-56916: Race Condition

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is user interaction required for exploitation?

Which software versions or configurations are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is user interaction required for exploitation?

Which software versions or configurations are affected?