SB20240608196 - Race condition in Linux kernel android driver
Published: June 8, 2024 Updated: May 13, 2025
Security Bulletin ID
SB20240608196
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Race condition (CVE-ID: CVE-2023-52609)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a race condition within the binder_update_page_range() function in drivers/android/binder_alloc.c. A local user can escalate privileges on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/95b1d336b0642198b56836b89908d07b9a0c9608
- https://git.kernel.org/stable/c/252a2a5569eb9f8d16428872cc24dea1ac0bb097
- https://git.kernel.org/stable/c/7e7a0d86542b0ea903006d3f42f33c4f7ead6918
- https://git.kernel.org/stable/c/98fee5bee97ad47b527a997d5786410430d1f0e9
- https://git.kernel.org/stable/c/6696f76c32ff67fec26823fc2df46498e70d9bf3
- https://git.kernel.org/stable/c/67f16bf2cc1698fd50e01ee8a2becc5a8e6d3a3e
- https://git.kernel.org/stable/c/77d210e8db4d61d43b2d16df66b1ec46fad2ee01
- https://git.kernel.org/stable/c/9a9ab0d963621d9d12199df9817e66982582d5a5
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.306
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.209
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.148
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.268
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.75
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.14
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.2
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8