Use-after-free in Google Android - CVE-2023-20928

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU71065

Use-after-free in Google Android - CVE-2023-20928

Published: January 11, 2023


Vulnerability identifier: #VU71065
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-20928
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in Binder driver. A local application can trigger a race condition and execute arbitrary code with elevated privileges.



Affected software

Google Android
Anolis OS
Ubuntu
openEuler
linux-image-5.4.0-139-generic (Ubuntu package)
linux-image-5.4.0-139-generic-lpae (Ubuntu package)
linux-image-5.4.0-139-lowlatency (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1044-ibm (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-bluefield (Ubuntu package)
linux-image-5.4.0-1058-bluefield (Ubuntu package)
linux-image-5.4.0-1093-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.4.0-1094-gke (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.4.0-1096-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1100-gcp (Ubuntu package)
linux-image-5.4.0-1103-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
bpftool-debuginfo
kernel
perf
kernel-tools-devel
python3-perf-debuginfo
python3-perf
kernel-tools
perf-debuginfo
kernel-debuginfo
kernel-tools-debuginfo
kernel-debugsource
kernel-headers
kernel-source
bpftool
kernel-devel
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel-debug-modules
kernel-core
kernel-debug-modules-extra
kernel-modules
kernel-modules-extra
kernel-tools-libs
kernel-tools-libs-devel

How to mitigate CVE-2023-20928

Install updates from vendor's website.

Google Android - addressed in versions 10 2023-01-05, 11 2023-01-05, 12L 2023-01-05, 12 2023-01-05, 13 2023-01-05
linux-image-5.4.0-139-generic (Ubuntu package) - update to 5.4.0-139.156~18.04.1
linux-image-5.4.0-139-generic-lpae (Ubuntu package) - update to 5.4.0-139.156~18.04.1
linux-image-5.4.0-139-lowlatency (Ubuntu package) - update to 5.4.0-139.156~18.04.1
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-oem-osp1 (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-oem (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.139.156~18.04.114
linux-image-5.4.0-1044-ibm (Ubuntu package) - update to 5.4.0-1044.49~18.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.4.0.1044.55, 5.4.0.1044.70
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1044.70
linux-image-bluefield (Ubuntu package) - update to 5.4.0.1058.53
linux-image-5.4.0-1058-bluefield (Ubuntu package) - update to 5.4.0-1058.64
linux-image-5.4.0-1093-oracle (Ubuntu package) - update to 5.4.0-1093.102~18.04.1
linux-image-oracle (Ubuntu package) - update to 5.4.0.1093.102~18.04.67
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1094.99
linux-image-gke (Ubuntu package) - update to 5.4.0.1094.99
linux-image-5.4.0-1094-gke (Ubuntu package) - update to 5.4.0-1094.101
linux-image-aws (Ubuntu package) - update to 5.4.0.1096.74
linux-image-5.4.0-1096-aws (Ubuntu package) - update to 5.4.0-1096.104~18.04.1
linux-image-gcp (Ubuntu package) - update to 5.4.0.1100.76
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1100.102
linux-image-5.4.0-1100-gcp (Ubuntu package) - update to 5.4.0-1100.109~18.04.1
linux-image-5.4.0-1103-azure-fde (Ubuntu package) - update to 5.4.0-1103.109+cvm1.1
linux-image-azure-fde (Ubuntu package) - update to 5.4.0.1103.109+cvm1.36
bpftool-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
perf - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-tools-devel - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
python3-perf-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
python3-perf - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-tools - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
perf-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-tools-debuginfo - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-debugsource - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-headers - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-source - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
bpftool - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-devel - addressed in versions 5.10.0-60.79.0.103, 5.10.0-136.17.0.93
kernel-debug - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-core - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-devel - addressed in versions 5.10.134-15, 5.10.134-16
perf - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-modules - addressed in versions 5.10.134-15, 5.10.134-16
kernel-core - addressed in versions 5.10.134-15, 5.10.134-16
kernel - addressed in versions 5.10.134-15, 5.10.134-16
bpftool - addressed in versions 5.10.134-15, 5.10.134-16
python3-perf - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-modules-extra - addressed in versions 5.10.134-15, 5.10.134-16
kernel-devel - addressed in versions 5.10.134-15, 5.10.134-16
kernel-headers - addressed in versions 5.10.134-15, 5.10.134-16
kernel-modules - addressed in versions 5.10.134-15, 5.10.134-16
kernel-modules-extra - addressed in versions 5.10.134-15, 5.10.134-16
kernel-tools - addressed in versions 5.10.134-15, 5.10.134-16
kernel-tools-libs - addressed in versions 5.10.134-15, 5.10.134-16
kernel-tools-libs-devel - addressed in versions 5.10.134-15, 5.10.134-16

External References

Related Security Bulletins