CVE-2026-58718

Received Received - Intake

Improper Input Validation in Arm SMMU V3

Publication date: 2026-09-15

Last updated on: 2026-09-18

Assigner: Google Devices

Description

In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-18

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-58718

EUVD

EUVD-2026-79007

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is in the smmu_detach_dev_nested function of arm-smmu-v3.c. It involves improper input validation, which could allow an attacker to escalate privileges locally. Exploitation requires system execution privileges but no user interaction.

Impact Analysis

If exploited, this vulnerability could allow an attacker with existing system privileges to gain higher privileges, potentially leading to full control over the affected system. This could result in unauthorized access, data theft, or system compromise.

Compliance Impact

This vulnerability allows local privilege escalation with system execution privileges, which could lead to unauthorized access or control over affected systems. Such access could compromise data confidentiality and integrity, potentially violating compliance requirements under GDPR (data protection) and HIPAA (healthcare data security).

Mitigation Strategies

Apply patches or updates from the vendor for the arm-smmu-v3.c component. Monitor official security advisories for fixes. Restrict local access to reduce privilege escalation risks.

Hi! I’m here to help you understand CVE-2026-58718. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70