CVE-2023-21106

2023-05-0800:00:00

ubuntu.com

adreno gpu driver

memory corruption

local privilege escalation

android kernel

qualcomm

upstream kernel

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

In adreno_set_param of adreno_gpu.c, there is a possible memory corruption
due to a double free. This could lead to local escalation of privilege with
no additional execution privileges needed. User interaction is not needed
for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
A-265016072References: Upstream kernel

Notes

Author	Note
sbeattie	this affects the Qualcomm ARM Adreno GPU driver.

OSVersionArchitecturePackageVersionFilename
ubuntu22.10noarchlinux< 5.19.0-42.43UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1025.26UNKNOWN
ubuntu22.10noarchlinux-azure< 5.19.0-1026.29UNKNOWN
ubuntu22.04noarchlinux-azure-5.19< 5.19.0-1026.29~22.04.1UNKNOWN
ubuntu22.10noarchlinux-gcp< 5.19.0-1024.26UNKNOWN
ubuntu22.04noarchlinux-hwe-5.19< 5.19.0-42.43~22.04.1UNKNOWN
ubuntu22.10noarchlinux-ibm< 5.19.0-1022.24UNKNOWN
ubuntu22.10noarchlinux-kvm< 5.19.0-1023.24UNKNOWN
ubuntu22.10noarchlinux-lowlatency< 5.19.0-1024.25UNKNOWN
ubuntu22.04noarchlinux-lowlatency-hwe-5.19< 5.19.0-1024.25~22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.10	noarch	linux	< 5.19.0-42.43	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1025.26	UNKNOWN
ubuntu	22.10	noarch	linux-azure	< 5.19.0-1026.29	UNKNOWN
ubuntu	22.04	noarch	linux-azure-5.19	< 5.19.0-1026.29~22.04.1	UNKNOWN
ubuntu	22.10	noarch	linux-gcp	< 5.19.0-1024.26	UNKNOWN
ubuntu	22.04	noarch	linux-hwe-5.19	< 5.19.0-42.43~22.04.1	UNKNOWN
ubuntu	22.10	noarch	linux-ibm	< 5.19.0-1022.24	UNKNOWN
ubuntu	22.10	noarch	linux-kvm	< 5.19.0-1023.24	UNKNOWN
ubuntu	22.10	noarch	linux-lowlatency	< 5.19.0-1024.25	UNKNOWN
ubuntu	22.04	noarch	linux-lowlatency-hwe-5.19	< 5.19.0-1024.25~22.04.1	UNKNOWN