Technical impact
A logic error in several functions of the arm-smmu-v3.c kernel module allows a local attacker to elevate privileges without needing additional execution rights. The flaw does not require user interaction, making it possible for any locally running code, such as a malicious application, to trigger the privilege escalation path. This weakness‑693).
Affected Systems
Android devices that contain the ARM SMMU v3 implementation, primarily Google Pixel devices following the 2026‑09‑01 security patch. All such devices are susceptible until the kernel patch is applied.
Risk and Exploitability
The CVSS score of 7.8 indicates high severity, and the lack of user interaction means any application with local code execution can exploit the flaw. The EPSS score is less than 1%, and the vulnerability is not listed in CISA KEV. The ability to gain local privilege without additional execution privileges implies that a malicious app or user‑level process can elevate its rights to kernel level, potentially leading to broader system compromise. Prompt patching is recommended due to the high severity and the wide occurrence of affected devices.
