CVE-2026-55297 · Infrastructure
NO FIX YET
A race condition in the handle_chan_msg function of the Linux TIPC virtio driver (tipc_virtio_dev.c) lets concurrent modification of shared memory bypass memory tag access controls. An attacker with System-level execution can use it to escalate privileges locally, and no user interaction is needed.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The sources describe a local privilege escalation requiring System-level execution privileges in the TIPC virtio driver, so exposure is limited to devices running the affected kernel. The sources do not name the affected Android or kernel versions, so unknown.
Not affected if no-tipc-virtio
Who cares android, kernel, tipc
Unknown from the sources.
No fix yet, per the sources.
In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared memory modification due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.