A critical out of bounds write vulnerability in the Android kernel allows an attacker to achieve local privilege escalation without user interaction.

The flaw resides in the hyp_alloc function within arch/arm64/kvm/hyp/nvhe/alloc.c, where improper input validation leads to an out of bounds write condition, enabling an unauthenticated local attacker to elevate privileges.

This vulnerability poses a significant risk to device integrity, as a successful exploit grants an attacker elevated privileges on the underlying system. Given the CVSS score of 8.4, this issue is classified as high severity, potentially leading to full system compromise, unauthorized data access, and the bypass of security sandbox protections.

Immediate Action: Review the March 2026 Android Security Bulletin and apply the latest kernel patches provided by your device manufacturer or Android distribution provider.

Proactive Monitoring: Monitor device logs for unexpected kernel panics or unauthorized attempts to access restricted memory regions or system processes.

Compensating Controls: Ensure that all installed applications originate from trusted sources and maintain updated security software to detect anomalous behavior, as this vulnerability requires local access to the device.

Public Exploit Available: Unknown

This vulnerability represents a significant security risk for Android devices due to the potential for local privilege escalation. Administrators and end users should prioritize the application of the latest security updates as soon as they are made available by their respective vendors to mitigate the risk of system compromise.