Skip to content
OpenAdvisories
High · 8.4 CVE-2025-36920 EUVD-2025-208532

In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead …

Published Mar 10, 2026 · Updated Mar 12, 2026 · Assigned by Google_Devices

Description

In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References