CVE-2025-48638

creationtimestamp| type| source ---|---|--- 2025-12-08 19:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7iqdurgpr2u...

CVE-2025-48638

CVE-2025-48638 affects Google Android’s pKVM (protected Kernel-based Virtual Machine) in the kernel, specifically in __pkvm_load_tracing within trace.c. The flaw is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with no additional execution priv...