{"id":"CVE-2026-58826","published":"2026-11-02T20:17:47.573","lastModified":"2026-11-03T05:18:45.577","description":"In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://android.googlesource.com/kernel/common/+/009c5006c969826d37a2c5fc2721a7bb20d72555","tags":[]},{"url":"https://android.googlesource.com/kernel/common/+/13beada2dac38c2d7303f1700aa16fb5053b919d","tags":[]},{"url":"https://android.googlesource.com/kernel/common/+/efe16a3021b9f95eb1cb83e98d0d1db9bff94ce4","tags":[]},{"url":"https://android.googlesource.com/kernel/common/+/f7d26609785ce56170645d56f306db38e8ba277a","tags":[]},{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in the ksys_unshare function of fork.c allows an unprivileged local attacker to corrupt memory and escalate privileges without user interaction.","exploitability":"Exploitation requires local access and no additional privileges; the use-after-free is triggered by calling ksys_unshare, but the exact reliability is unclear due to lack of public exploit details.","blast_radius":"Successful exploitation grants local privilege escalation with full system compromise (confidentiality, integrity, availability) and no user interaction required.","remediation":"Apply the kernel patch released for CVE-2026-58826; if no fixed kernel version is published by the vendor, disable unshare-related syscalls via seccomp filters or upgrade to a patched kernel version as soon as one is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["use-after-free","local-privilege-escalation","memory-corruption","kernel"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:04:41.829Z"}}