ARM64_TLBI in mmu.h contains a race condition that can corrupt memory, potentially allowing a malicious local actor to gain higher privileges without additional execution rights. The flaw is a classic race condition (CWE‑362) and is reported by Google as a local escape, meaning it does not require any user interaction to succeed.

The vulnerability affects Android devices manufactured by Google. No specific versions are listed in the current disclosure; it is tied to the ARM64_TLBI implementation in the kernel mmu.h header used across the Android operating system on Google hardware.

The CVSS score of 7 indicates a moderate-to-high severity. The EPSS score of <1% indicates a very low exploitation probability, and the issue is not yet listed in the CISA KEV catalog. Exploitation requires local access; a resident or guest user can trigger the race by issuing competing memory operations to the kernel, leading to privilege escalation. The attack vector is inferred to be local, as the description states that user interaction is not needed, and no network interfaces are involved. Because the flaw has no known remote trigger, the risk is contained to a single device and attacker must have physical presence or local user credentials.