CVE-2026-58848: Race Condition
Published Sep 8, 2026
·Updated
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 8, 2026
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
Exploitation is described as local escalation of privilege. The attacker does not need additional execution privileges, and no user interaction is required.
2
What could an attacker gain if exploitation succeeds?
The race condition can allow unauthorized read and write access. It could therefore be used to escalate privileges locally.
3
Can I determine affected versions or configurations from the available information?
No affected version range or configuration criteria is provided. The available references include a kernel source change and the September 2026 Android security bulletin.