---
id: "CVE-2026-58827"
kind: "vulnerability"
aliases: ["CVE-2026-58827"]
title: "Android kernel dma-buf race condition allows use-after-free and local privilege escalation (fixed in 2026-11-05 patch level)"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Android", "fixed": ["2026-11-05"], "affected": "security patch level before 2026-11-05", "ecosystem": "vendor"}]
ecosystems: []
tags: ["android", "dma-buf", "infrastructure", "linux-kernel", "linux-servers", "mobile"]
not_affected_if: []
published_at: "2026-11-02T20:17:47+00:00"
first_seen_at: "2026-11-02T20:35:31+00:00"
updated_at: "2026-11-02T20:41:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58827", "first_seen_at": "2026-11-02T20:35:31+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-02T20:41:47+00:00"}]
---

# Android kernel dma-buf race condition allows use-after-free and local privilege escalation (fixed in 2026-11-05 patch level)

Google's November 2026 Android Security Bulletin lists this as a High-severity elevation-of-privilege bug in the kernel's Direct Memory Access Buffer (dma-buf.c) component: a race condition causing a use-after-free. Exploitation needs no extra privileges and no user interaction, but is local. The bulletin does not say it is exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Android affected security patch level before 2026-11-05 fixed 2026-11-05

## How to check

On an Android device: Settings > About phone > Android version > Android security patch level; 2026-11-05 or later is fixed. Vendors may ship it later than Google. Also check any non-Android Linux kernel you run for the two upstream commits; the bulletin does not say that those kernels are affected.

## Fix

Android security patch level 2026-11-05 or later (kernel upstream commits 769fa413e80cca30ff767f6f3e18f920d0353f67 and 6642375b48bea1fc287a9281db591a8edc74db79, per the bulletin; Android bug A-499359964).

## Timeline

- 2026-11-02T20:35:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-58827
- 2026-11-02T20:41:47+00:00 analyst — Not a generic Linux CVE: it is in Google's Android Security Bulletin Nov 2026, kernel section, 2026-11-05 patch level, A-499359964, EoP High. Bulletin read via WebFetch summary because web-cli truncated; fix verified from it. No kernel version ranges published. No exploitation noted. Skipped X search.

## Documents

- [advisory] Android Security Bulletin—November 2026 https://source.android.com/docs/security/bulletin/2026/2026-11-01
- [mentions] Rapid7: CVE-2026-58827 Google Android dma-buf.c https://www.rapid7.com/db/vulnerabilities/cve-2026-58827/

## From the sources

In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_