This vulnerability exists in the smmu_install_nested_ste function within the arm-smmu-v3.c component of Google Android. A logic error in the code can lead to an elevation of privilege, allowing a local attacker with system execution privileges to gain higher privileges. The attack vector requires local access and no user interaction is needed. The CVSS 3.1 vector is AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, reflecting a local attack with low complexity but requiring high privileges, impacting confidentiality, integrity, and availability.

An attacker with existing system execution privileges can exploit this logic error to elevate their privileges further, potentially gaining full control over the affected Android system. This could lead to complete compromise of confidentiality, integrity, and availability of the device. However, the attacker must already have system-level execution rights, limiting the initial attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor official Google Android security advisories for updates. Until a fix is available, restrict local access to trusted users and environments to reduce risk.