Hiroyuki Katsura@moratorium08
AIを活用しながら、Cで書かれたAndroidで動くハイパーバイザ pKVMを検証する話をします。検証している傍ら複数の脆弱性(CVE-2026-59048, CVE-2026-59046, CVE-2026-98466)も発見し報告しました https://x.com/KWatanabeCS/status/2118625373231653231
115078213.3K
1.3K followersView on X
CVE-2026-59046(google / android)
LOWCVSS 6.2 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
0.0/ 10 priority
Sources & remediation
Patch / fix
Weakness type (CWE)
CWE-20
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- android
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
android
1 version affected across 1 product
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - |