CVE-2026-55307CWE-269privilege-escalation

CVE-2026-55307

Medium · published October 6, 2026

CVSS v3.1
4.4
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00074 · 0.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-10-06T23:18Z
References (1)
https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01 · [email protected]
EPSS history
Timeline
  • 08 OCT 03:30Z
    EPSS moved — → 0%
    epss
  • 06 OCT 18:20Z
    In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code
    cvelistv5