CVE-2023-21255
Summary
| CVE | CVE-2023-21255 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-07-13 00:15:00 UTC |
| Updated | 2024-01-19 16:15:00 UTC |
| Description | In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
Risk And Classification
Problem Types: CWE-787 | CWE-416
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Android | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Android Security Bulletin—July 2023 | Android Open Source Project | MISC | source.android.com | |
| [SECURITY] [DLA 3623-1] linux-5.10 security update | MISC | lists.debian.org | |
| Debian -- Security Information -- DSA-5480-1 linux | MISC | www.debian.org | |
| CVE-2023-21255 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security | security.netapp.com | ||
| 1ca1130ec62d - kernel/common - Git at Google | MISC | android.googlesource.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 199757 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6339-4)
- 199784 Ubuntu Security Notification for Linux kernel (BlueField) Vulnerabilities (USN-6397-1)
- 6000212 Debian Security Update for linux (DSA 5480-1)
- 6000265 Debian Security Update for linux-5.10 (DLA 3623-1)
- 610501 Google Android August 2023 Security Patch Missing for Samsung
- 610504 Google Android Devices July 2023 Security Patch Missing
- 673354 EulerOS Security Update for kernel (EulerOS-SA-2023-2843)
- 673449 EulerOS Security Update for kernel (EulerOS-SA-2023-2898)
- 673496 EulerOS Security Update for kernel (EulerOS-SA-2023-2860)
- 673970 EulerOS Security Update for kernel (EulerOS-SA-2023-2879)