ASB-A-503385812

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-503385812.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-503385812
Aliases
  • A-503385812
  • CVE-2026-58847
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:25Z
Summary
[none]
Details

In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / :linux_kernel:

Package

Name
:linux_kernel:

Affected ranges

Type
ECOSYSTEM
Events
Introduced
:0
Fixed
:2026-11-05

Affected versions

Other
Kernel

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb"
    ],
    "severity":  "High",
    "spl":  "2026-11-05",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "99892171902826701721908594755211016053",
                "length":  671
            },
            "id":  "ASB-A-503385812-4611065e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb",
            "target":  {
                "file":  "virt/kvm/vfio.c",
                "function":  "kvm_vfio_pviommu_attach"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "77932403112495172743288900516447989814",
                    "141526517654518460604088811293200832323",
                    "27836268315525444471369181122377179500",
                    "33757979601207912645308252154973417339",
                    "305458979290355936414707965711092392559",
                    "314650931647502009322239686021033032681",
                    "228057565913214674416804129910504748593",
                    "27899858423427688711248582660830382998",
                    "265205290138312779401596656267812905893",
                    "330542579927671329995984923348170246750",
                    "56678954344851737991566539409408747853",
                    "132441708529659720524479451344967449566",
                    "7410984180084189500776710001672207785",
                    "217674688684235168094731582971025265764",
                    "120648066300451268904949716206175355406"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-503385812-7dfb2441",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb",
            "target":  {
                "file":  "virt/kvm/vfio.c"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503385812.json"