CVE-2026-56944 · Runtime
NO FIX YET
A logic error in the Arm SMMU v3 driver's device detach path (smmu_detach_dev, pKVM build) can cause a use-after-free. A local user with normal execution rights can use it to escalate privileges.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only systems running the Google pKVM build of the Arm SMMU v3 driver are described; the sources do not list affected kernel versions or configurations. Teams running stock kernels or no Arm SMMU hardware with this driver can likely skip it, but the sources do not confirm this.
Not affected if no-arm-smmu-v3, stock-kernel
Who cares android, arm-smmu-v3, linux-kernel, pkvm
Unknown from the sources.
No fix yet, per the sources.
In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use After Free due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.