CVE-2026-58766

A logic error (CWE-693, protection mechanism failure) in multiple functions of arm-smmu-v3.c, the Linux kernel's driver for ARM's System Memory Management Unit version 3 (IOMMU), can be abused by an already-running, low-privileged local process to escalate privileges to kernel/root level. Exploitation requires no additional execution privileges, no user interaction, and succeeds with low attack complexity, giving the attacker full control over confidentiality, integrity, and availability of the system. The flaw affects Linux-based ARM64 platforms that ship this IOMMU driver, which is typical of modern Android devices, ARM servers (e.g., Neoverse-class SoCs), and embedded ARM64 systems — notably, the CVE was assigned by Google's Android/device security CNA, suggesting Android exposure. No public proof-of-concept exists, the issue is not in CISA's KEV catalog, and no exploitation in the wild is known. The advisory does not specify fixed or affected kernel versions, so vendor patch tracking is essential.

What to do: Apply Linux kernel updates from your distribution or device OEM as soon as patched builds are released, and install the latest Android security patch level once the fix is included. On ARM64 servers and multi-tenant hosts, restrict untrusted local code execution and review IOMMU/DMA settings until the host kernel is patched. Track the vendor advisory for the specific fixed kernel commit and backported versions, since none are listed here.