{"id":"ASB-A-503385812","details":"In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-503385812","CVE-2026-58847"],"modified":"2026-11-02T17:11:25.939984356Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2026-11-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"severity":"High","spl":"2026-11-05","types":["EoP"],"vanir_signatures":[{"target":{"file":"virt/kvm/vfio.c","function":"kvm_vfio_pviommu_attach"},"deprecated":false,"digest":{"function_hash":"99892171902826701721908594755211016053","length":671},"id":"ASB-A-503385812-4611065e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb"},{"target":{"file":"virt/kvm/vfio.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["77932403112495172743288900516447989814","141526517654518460604088811293200832323","27836268315525444471369181122377179500","33757979601207912645308252154973417339","305458979290355936414707965711092392559","314650931647502009322239686021033032681","228057565913214674416804129910504748593","27899858423427688711248582660830382998","265205290138312779401596656267812905893","330542579927671329995984923348170246750","56678954344851737991566539409408747853","132441708529659720524479451344967449566","7410984180084189500776710001672207785","217674688684235168094731582971025265764","120648066300451268904949716206175355406"]},"id":"ASB-A-503385812-7dfb2441","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb"}],"fixes":["https://android.googlesource.com/kernel/common/+/8c62fa09cc8a04cbaaa5d00b5dcd51279bee3bdb"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503385812.json"}}],"schema_version":"1.9.2"}