SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-58701

HIGH · CVSS 7 EPSS 0.05% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A race condition in the trusty_dputc function of generic-arm64-smcall.c allows for a potential out-of-bounds write, which could enable local users to escalate their privileges to System level. Exploitation does not require user interaction, making this a significant risk for systems utilizing the affected code. Organizations using affected products should prioritize patching to mitigate the risk of privilege escalation attacks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-58701
Severity
HIGH
CVSS
7
EPSS
0.05%

Original NVD Description

In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.