A memory corruption vulnerability in the Android pkvm component poses a significant risk of local privilege escalation for affected devices.

The vulnerability exists within the init_pkvm_hyp_vcpu function of pkvm.c, where improper input validation leads to an out of bounds write, allowing a local attacker to achieve privilege escalation without additional execution privileges or user interaction.

The ability for a local attacker to escalate privileges to the kernel level represents a severe security compromise, potentially granting full control over the device. Given the CVSS score of 7.8, this vulnerability is classified as High, as it undermines the fundamental security boundary between the user space and the kernel, risking data theft and persistent malware installation.

Immediate Action: Review the Google Android Security Bulletin for December 2025 and apply the provided kernel patches or manufacturer updates to all affected devices.

Proactive Monitoring: Monitor system logs for unusual kernel panics or unauthorized attempts to access restricted system resources that may indicate exploitation attempts.

Compensating Controls: Ensure that device security policies are strictly enforced, particularly those restricting the installation of untrusted applications, to limit the potential for local attackers to gain the foothold required to exploit this flaw.

Public Exploit Available: Unknown

This vulnerability presents a high risk of privilege escalation that could lead to complete device compromise. Security teams and administrators should prioritize the deployment of the official Android security updates as documented in the December 2025 bulletin to ensure the kernel is properly patched against this out of bounds write condition.