Android Kernel pKVM Information Disclosure Vulnerability

A logic error in the memory protection code of the Android kernel's virtual machine component for ARM64 can lead to a local information disclosure. This vulnerability arises from a configuration data leak, allowing unauthorized access to sensitive information without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially leading to further exploitation or privilege escalation.

Remediation

Users can update to the December 2025 security patch level to address this vulnerability.