CVE-2026-56916

HighCVSS 7.8/10Last modified Nov 13, 2026

Description

In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
GoogleAndroidAndroid kernel

References

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-569198.8In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confused deputy. This couldCVE-2026-56927.3A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cCVE-2026-569208.8In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to CVE-2026-569226.7In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System executiCVE-2026-569236.4In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalationCVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device reboCVE-2026-569297.8In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a logic error in the code.CVE-2026-56935.3The Smart Appointment & Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check anCVE-2026-569308.4In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to a CVE-2026-569326.7In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalatioCVE-2026-569337.8In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalatCVE-2026-569347.8In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code. This
CVE-2026-56916: High severity, CVSS 7.8 | Vulnix