Description
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Published: 2026-09-15
Score: 6.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Local Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

The vulnerability is a race condition in the handle_unmap_req function of tip can corrupt memory. Attackers can exploit the timing issue to gain elevated privileges on the device without needing to run The flaw does not allow for remote exploitation or broader access beyond the local system.

Affected Systems

Google Android devices that include the TIPC Virtio driver in tipc_virtio_dev.c are impacted. No specific Android version or build is listed, so all releases containing this driver are potentially affected.

Risk and Exploitability

The CVSS score is 6.4, indicating moderate severity. The EPSS score is 0.00054, and the vulnerability is not listed in the CISA KEV catalog. Because no user interaction is required, the attack is local and can be executed by any user with access to the device. The risk is significant for users who run untrusted code or who have local access to the system.

Generated by OpenCVE AI on September 17, 2026 at 10:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest Android security patch released by Google that addresses the TIPC Virtio race condition.
  • If a patch is not yet available, disable or restrict usage of the TIPC Virtio device until an update is applied.
  • Follow Android security best practices, such as restricting execution of untrusted applications and ensuring device access controls are enforced.

Generated by OpenCVE AI on September 17, 2026 at 10:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 17 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
Title Android Vulnerability in TIPC Virtio Device Enables Local Privilege Escalation

Wed, 16 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
Title Android Vulnerability in TIPC Virtio Device Enables Local Privilege Escalation

Tue, 15 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Tue, 15 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
Metrics cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Tue, 15 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Description In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References

Subscriptions

Google Android
cve-icon MITRE

Status: PUBLISHED

Assigner: Google_Devices

Published:

Updated: 2026-09-16T03:57:37.052Z

Reserved: 2026-06-23T16:10:45.837Z

Link: CVE-2026-56923

cve-icon Vulnrichment

Updated: 2026-09-15T20:08:35.316Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-15T19:17:28.060

Modified: 2026-09-16T19:24:44.153

Link: CVE-2026-56923

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-17T10:15:08Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')