In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Thu, 12 Nov 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Privilege Escalation via Stale TLB Entries in Android SMMU | |
| Weaknesses | CWE-635 CWE-668 |
Thu, 12 Nov 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-441 | |
| Metrics |
cvssV3_1
|
Thu, 12 Nov 2026 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Privilege Escalation via Stale TLB Entries in Android SMMU | |
| Weaknesses | CWE-635 CWE-668 |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Google_Devices
Published: 2026-11-10T19:20:40.992Z
Updated: 2026-11-12T20:18:12.890Z
Reserved: 2026-06-23T16:12:13.078Z
Link: CVE-2026-56930
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T20:19:15.707
Modified: 2026-11-12T21:17:29.910
Link: CVE-2026-56930
Redhat
No data.