In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Thu, 12 Nov 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unmap Logic Error in ARM SMMU Enables Local Privilege Escalation | |
| Weaknesses | CWE-284 CWE-416 |
Thu, 12 Nov 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unmap Logic Error in ARM SMMU Enables Local Privilege Escalation | |
| Weaknesses | CWE-284 CWE-416 |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Google_Devices
Published: 2026-11-10T19:20:50.857Z
Updated: 2026-11-10T19:20:50.857Z
Reserved: 2026-06-23T16:13:58.908Z
Link: CVE-2026-56946
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T20:19:16.533
Modified: 2026-11-10T21:46:38.673
Link: CVE-2026-56946
Redhat
No data.