VULNERABILITY INTELLIGENCE

CVE-2023-21215

CVSS score9.8 CRITICAL

EPSS probability0.41%

CISA KEVNot currently listed

Published2023-12-04

Last modified2026-06-17

Description

In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.