VULNERABILITY INTELLIGENCE
CVE-2023-21400
CVSS score6.7 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2023-07-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
Weakness classification
- nvd@nist.gov: CWE-667
Primary references
- security@android.com — Third Party Advisory, VDB Entry
- security@android.com — Mailing List, Third Party Advisory
- security@android.com — Exploit, Mailing List, Third Party Advisory
- security@android.com — Mailing List, Third Party Advisory
- security@android.com — Mailing List
- security@android.com — Mailing List, Third Party Advisory
- security@android.com
- security@android.com — Vendor Advisory
- security@android.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory