Live › vulnerability › CVE-2026-58827
Google's November 2026 Android Security Bulletin lists this as a High-severity elevation-of-privilege bug in the kernel's Direct Memory Access Buffer (dma-buf.c) component: a race condition causing a use-after-free. Exploitation needs no extra privileges and no user interaction, but is local. The bulletin does not say it is exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
Android devices whose kernel contains the vulnerable dma-buf code and whose security patch level is older than 2026-11-05. An attacker needs to run code locally on the device, such as a malicious app. Devices already at patch level 2026-11-05 or later can skip it. The bulletin does not list affected kernel versions, and it does not say that non-Android Linux servers are affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Android | vendor | security patch level before 2026-11-05 | 2026-11-05 |
Android security patch level 2026-11-05 or later (kernel upstream commits 769fa413e80cca30ff767f6f3e18f920d0353f67 and 6642375b48bea1fc287a9281db591a8edc74db79, per the bulletin; Android bug A-499359964).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-58827")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.