CVE-2023-21102

2023-05-0800:00:00

ubuntu.com

logic error

local privilege escalation

android kernel

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of
shadow stack protection due to a logic error in the code. This could lead
to local escalation of privilege with no additional execution privileges
needed. User interaction is not needed for exploitation.Product:
AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream
kernel

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-70.77UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-42.43UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1034.38UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1025.26UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1034.38~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1036.43UNKNOWN
ubuntu22.10noarchlinux-azure< 5.19.0-1026.29UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1036.43~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-5.19< 5.19.0-1026.29~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1036.43.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-70.77	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-42.43	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1034.38	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1025.26	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1034.38~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1036.43	UNKNOWN
ubuntu	22.10	noarch	linux-azure	< 5.19.0-1026.29	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1036.43~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-5.19	< 5.19.0-1026.29~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-fde	< 5.15.0-1036.43.1	UNKNOWN