{"id":"CVE-2026-58827","published":"2026-11-02T20:17:47.703","lastModified":"2026-11-03T05:18:45.800","description":"In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://android.googlesource.com/kernel/common/+/6642375b48bea1fc287a9281db591a8edc74db79","tags":[]},{"url":"https://android.googlesource.com/kernel/common/+/769fa413e80cca30ff767f6f3e18f920d0353f67","tags":[]},{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in dma-buf.c arises from a race condition in multiple functions, allowing an unprivileged local attacker to potentially execute arbitrary code with kernel privileges.","exploitability":"Exploitation requires local access and is non-trivial due to the race condition, but no user interaction or additional privileges are needed.","blast_radius":"Successful exploitation could lead to full system compromise, including privilege escalation to root, data theft, or system manipulation by a local attacker.","remediation":"Apply the kernel patch released in Linux kernel v6.12.4 or later, which resolves the race condition in dma-buf.c.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["use-after-free","privilege-escalation","race-condition","kernel"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:04:49.468Z"}}