CVE-2026-56934

Not scored yetLast modified Nov 10, 2026

Description

In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-56935In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error. This could lead to local informationCVE-2026-569366.8In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physiCVE-2026-56938In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to local escalation of privilege withCVE-2026-56947.2The Quick Interest Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'loan-amount' and 'loan-period' parameteCVE-2026-569418.4In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalaCVE-2026-569428.8In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalCVE-2026-56943In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect bouCVE-2026-56944In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use AftCVE-2026-569457.8In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additionaCVE-2026-56946In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping dCVE-2026-56947In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused deputy. This could leaCVE-2026-569496.4In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race co
CVE-2026-56934: Unscored | Vulnix