← back
CVE-2023-21400

CVE-2023-21400

EPSS 0.3%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Jul 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
Affected products
Google · Android
References
http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.htmlhttps://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlhttps://security.netapp.com/advisory/ntap-20240119-0012/https://source.android.com/security/bulletin/pixel/2023-07-01https://www.debian.org/security/2023/dsa-5480http://www.openwall.com/lists/oss-security/2023/07/14/2http://www.openwall.com/lists/oss-security/2023/07/19/2http://www.openwall.com/lists/oss-security/2023/07/19/7http://www.openwall.com/lists/oss-security/2023/07/25/7