CVE-2026-59046

— UNSCORED

Published 2026-11-02 · Updated 2026-11-02

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

All references

https://android.googlesource.com/kernel/common/+/4a75aa4e840f294efd47084e083a6e91069bce58
https://android.googlesource.com/kernel/common/+/525cfccadb92e7c9314d03cce600fed7335874d9
https://source.android.com/docs/security/bulletin/2026/2026-11-01

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.