CVE-2026-0178

MediumCVSS 6.7/10Last modified Nov 13, 2026

Description

In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-01796.7In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege witCVE-2026-01834.4In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System exeCVE-2026-01866.7In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalCVE-2026-01876.7In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could leadCVE-2026-01898.4In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of CVE-2026-01917.8In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation CVE-2026-01926.7In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privileCVE-2026-01933.3In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. This could lead to local information disclCVE-2026-01948.4In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege wiCVE-2026-01954.0In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. ThCVE-2026-01974.4In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with SCVE-2026-01984.4In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information
CVE-2026-0178: Medium severity, CVSS 6.7 | Vulnix