This vulnerability arises from a logic error in the smmu_detach_dev function within arm-smmu-v3.c in the Android operating system. The flaw allows a local attacker who already has system execution privileges to bypass permission checks, potentially leading to an elevation of privilege. No user interaction is required for exploitation. The CVSS v3.1 vector indicates that the attack requires local access with low complexity, high privileges, and results in high confidentiality, integrity, and availability impacts.

An attacker with existing system execution privileges on the device could exploit this vulnerability to gain elevated privileges beyond those initially granted. This could compromise the confidentiality, integrity, and availability of the affected system. Since user interaction is not required, the vulnerability could be exploited silently by a local attacker.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time. Users and administrators should monitor Google's security advisories for updates and apply any official patches once released.