{"id":"ASB-A-503395542", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-58824", "A-503395542"], "details":"In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":":linux_kernel:", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":":0"}, {"fixed":":2026-11-05"}]}], "versions":["Kernel"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/8be8949794c96f10348fdd3d8dc7740fdfecd4e2", "https://android.googlesource.com/kernel/common/+/5a6735b89ba7c8684d36e2ecd9b02e834e97de9c"], "severity":"High", "spl":"2026-11-05", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"21394533381659634277623083634516930110", "length":848}, "id":"ASB-A-503395542-5e94d61d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/5a6735b89ba7c8684d36e2ecd9b02e834e97de9c", "target":{"file":"arch/arm64/kvm/hyp/nvhe/trace.c", "function":"__pkvm_load_tracing"}}, {"deprecated":false, "digest":{"function_hash":"67389244385260479082830307056730358798", "length":852}, "id":"ASB-A-503395542-743e633f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/8be8949794c96f10348fdd3d8dc7740fdfecd4e2", "target":{"file":"arch/arm64/kvm/hyp/nvhe/trace.c", "function":"__pkvm_load_tracing"}}, {"deprecated":false, "digest":{"line_hashes":["173646515533660227693166779030008468902", "42995152209183546442050534751178015183", "295755121315107024598760993629748236535", "104697032925793524346718773328936166936"], "threshold":0.9}, "id":"ASB-A-503395542-7f588805", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/5a6735b89ba7c8684d36e2ecd9b02e834e97de9c", "target":{"file":"arch/arm64/kvm/hyp/nvhe/trace.c"}}, {"deprecated":false, "digest":{"line_hashes":["173646515533660227693166779030008468902", "42995152209183546442050534751178015183", "295755121315107024598760993629748236535", "104697032925793524346718773328936166936"], "threshold":0.9}, "id":"ASB-A-503395542-e2800f3f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/8be8949794c96f10348fdd3d8dc7740fdfecd4e2", "target":{"file":"arch/arm64/kvm/hyp/nvhe/trace.c"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/8be8949794c96f10348fdd3d8dc7740fdfecd4e2"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/5a6735b89ba7c8684d36e2ecd9b02e834e97de9c"}]}