CVE-2026-0163

Summary

The flaw involves a use after free vulnerability in vpu_ioctl.c, allowing remote escalation of privilege without additional execution privileges. This is critical as it can be exploited by attackers to gain full control over the system.

Exploitability

Exploitation is relatively straightforward with no user interaction required. The attacker must have network access to the affected system.

Blast radius

If exploited, the impact is severe as it allows remote attackers to gain full control over the system, potentially leading to data theft, system compromise, and further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 2.590 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.