CVE-2023-21400

2023-07-1223:53:37

google_android

www.cve.org

memory corruption

io_uring.c

kernel

locking

privilege escalation

system execution

exploitation

local escalation

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Android",
    "vendor": "Google",
    "versions": [
      {
        "status": "affected",
        "version": "Android kernel"
      }
    ]
  }
]