CVE-2026-0029 - Vulnerability Analysis

Overview

pkvm contains a logic error in __pkvm_init_vm function causing possible memory corruption, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

Severity & Score

Impact

Local attackers can escalate privileges due to memory corruption without needing extra execution privileges.

Mitigation

Update to the latest version containing the fix.

References

• https://source.android.com/security/bulletin/2026-03-01
• https://android.googlesource.com/kernel/common/+/42eff3b2fd3a906ac8cdb6284d3265bc0856b56b
• https://android.googlesource.com/kernel/common/+/749cf1743eb22eff1851c68a533147e1af97a9bf
• https://android.googlesource.com/kernel/common/+/ae242b26371808a221578b89c937568781719d2c

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 3, 2026

🔴 CVE-2026-0029 - Critical (9.8) In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0029/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner