In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36920
NONE
EPSS 0.01%
Updated Mar 10, 2026
In
CVE Details
CVE ID
CVE-2025-36920
Published Date
Mar 10, 2026
Vendor
In
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.01%
Likelihood of exploitation in next 30 days
Percentile:
0.8th percentile (higher than 0.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory