In the kernel function kvm_vfio_pviommu_attach within vfio.c, the code contains a logic error that may cause a double free. When triggered, this flaw can allow a local attacker to elevate privileges without requiring any additional execution permissions. The vulnerability is exploitable without user interaction or special privileges beyond those normally available to a local user, meaning any user on the device can potentially gain elevated access.

The vulnerability is present in Google Android operating systems; affected versions are not specified in the advisory, so all devices running the vulnerable kernel build are considered at risk.

The flaw is a local privilege escalation and can be abused by an attacker who can execute code on the target device. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, indicating no publicly known exploitation yet. Still, the potential for privilege escalation makes the risk significant, especially if the device’s kernel is not yet patched. The attack vector is local; no remote code execution or user interaction is required.