A race condition vulnerability in the Android kernel, specifically within the gxp_main_actor component, could allow a local attacker to achieve privilege escalation.

The vulnerability exists in the PrepareWorkloadBuffers function within gxp_main_actor.cc and stems from a race condition resulting in a double fetch, which can be triggered by a local attacker with low privileges to escalate their access.

Successful exploitation allows a local attacker to gain elevated privileges on an affected Android device, potentially bypassing security boundaries to access sensitive data or perform unauthorized system actions. Given the CVSS score of 7.0, this flaw represents a significant risk to device integrity and user privacy, as it permits full compromise of the affected system's confidentiality, integrity, and availability.

Immediate Action: Apply the latest security updates provided by Google or the device manufacturer as specified in the December 2025 Android Security Bulletin.

Proactive Monitoring: Monitor system logs for unusual kernel activity or unexpected process behavior that may indicate an attempt to exploit race conditions.

Compensating Controls: Ensure that third party applications are restricted to verified sources, as this vulnerability requires local access to the device.

Public Exploit Available: No

Users and administrators should prioritize the deployment of the December 2025 security patch, which contains the necessary mitigations for this kernel flaw. Because this vulnerability facilitates privilege escalation without requiring user interaction, prompt patching is essential to maintain the security posture of Android devices within the organization.