Android Kernel Privilege Escalation Vulnerability in pKVM via Out-of-Bounds Write

A vulnerability allowing local escalation of privileges has been identified in the Android kernel's memory protection handling within the KVM (Kernel-based Virtual Machine) component. This issue arises from an integer overflow that leads to a possible out-of-bounds write, allowing unauthorized modification of memory. The vulnerability does not require any additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.