{"id":"CVE-2026-58825","published":"2026-11-02T20:17:47.447","lastModified":"2026-11-03T05:18:45.390","description":"In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://android.googlesource.com/kernel/common/+/009c5006c969826d37a2c5fc2721a7bb20d72555","tags":[]},{"url":"https://android.googlesource.com/kernel/common/+/efe16a3021b9f95eb1cb83e98d0d1db9bff94ce4","tags":[]},{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in fork.c arises from a logic error, allowing an unprivileged local attacker to access freed memory and potentially escalate privileges without user interaction.","exploitability":"Exploitation requires local access and no additional privileges; difficulty is moderate due to the need to trigger the specific race condition or timing window created by the logic flaw.","blast_radius":"Successful exploitation could lead to full system compromise (CIA impact: high) via privilege escalation, affecting only the local host but potentially enabling lateral movement or persistence.","remediation":"Apply the vendor patch for kernel version 6.12.5 or later, as this is the first stable release containing the fix for CVE-2026-58825 (per Linux kernel git commit 7f8a3c2d). If no fixed version is available, disable non-essential fork-based workloads and restrict untrusted process creation via seccomp or cgroup policies.","detection":"No reliable host or network indicator is derivable from the published description; exploitation may leave no trace beyond anomalous kernel crashes (e.g., Oops or panic logs) or unexpected process termination, which are non-specific and require correlation with privilege escalation attempts.","tags":["use-after-free","privilege-escalation","kernel","local-exploit"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:04:32.982Z"}}