CVE-2025-36920 - Vulnerability Analysis

Overview

Linux Kernel contains an out of bounds write caused by improper input validation in hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, letting local attackers escalate privileges, exploit requires no additional execution privileges or user interaction.

Severity & Score

Impact

Local attackers can escalate privileges, potentially gaining full control of the system.

Mitigation

Update to the latest Linux Kernel version with the fix applied.

References

• https://source.android.com/security/bulletin/pixel/2026-03-01
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner