The function smmu_detach_dev in arm-smmu‑v3.c contains a logic error that allows a local user to bypass permission checks, potentially elevating privileges to system execution level. The vulnerability does not require user interaction, so any local attacker can exploit it on a compromised device. The flaw specifically targets the SMMU detach operation, which controls secure memory access for peripherals.

The vulnerability affects Android systems supplied by Google, specifically those that include the arm‑smmu‑v3.c component. The advisory does not list specific OS releases or device models, so any device running a version of Android with the affected code is potentially susceptible.

The CVSS score of 6.7 indicates moderate severity. The EPSS score is below 1%, indicating a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, suggesting that no widespread or actively exploited variants are known. Exploitation is likely local; an attacker with physical or local device access could trigger the privilege escalation without additional user interaction. Because the flaw allows a direct bypass of permission checks, the attack does not rely on complex chain steps and is thus relatively straightforward for anyone with local access.