CVE-2023-35693

EUVD-2023-39693
In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
googleandroid
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.115-1
fixed
bookworm (security)
6.1.119-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
sid
6.12.6-1
fixed
trixie
6.12.6-1
fixed
Common Weakness Enumeration
References
https://android.googlesource.com/kernel/common/+/8ff940b3513cb
https://source.android.com/security/bulletin/pixel/2023-07-01
https://android.googlesource.com/kernel/common/+/8ff940b3513cb
https://source.android.com/security/bulletin/pixel/2023-07-01