Buffer overflow in Google Android - CVE-2023-20938

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU72032

Buffer overflow in Google Android - CVE-2023-20938

Published: February 7, 2023 / Updated: August 22, 2025


Vulnerability identifier: #VU72032
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-20938
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error within the Binder component in kernel. A local application can trigger memory corruption and execute arbitrary code with elevated privileges.

Affected software

Google Android
Anolis OS
Ubuntu
openEuler
kernel-tools
kernel-debuginfo
kernel-tools-debuginfo
kernel-source
kernel-tools-devel
kernel-devel
bpftool-debuginfo
perf-debuginfo
python3-perf-debuginfo
python2-perf
bpftool
python2-perf-debuginfo
kernel-debugsource
kernel
perf
python3-perf
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-144-generic (Ubuntu package)
linux-image-5.4.0-144-lowlatency (Ubuntu package)
linux-image-5.4.0-144-generic-lpae (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1045-ibm (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-bluefield (Ubuntu package)
linux-image-5.4.0-1059-bluefield (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-5.4.0-1065-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1081-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1087-kvm (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1094-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1095-gke (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1097-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1101-gcp (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1104-azure (Ubuntu package)
kernel-headers
kernel-debug
kernel-tools-libs-devel
kernel-tools-libs
kernel-modules-extra
kernel-modules
kernel-core
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-72-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-72-generic-64k (Ubuntu package)
linux-image-5.15.0-72-generic-lpae (Ubuntu package)
linux-image-5.15.0-72-generic (Ubuntu package)
linux-image-5.15.0-72-lowlatency (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1020-gkeop (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1029-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1029-raspi (Ubuntu package)
linux-image-5.15.0-1030-ibm (Ubuntu package)
linux-image-5.15.0-1030-intel-iotg (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1033-gke (Ubuntu package)
linux-image-5.15.0-1033-kvm (Ubuntu package)
linux-image-5.15.0-1033-gcp (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1034-gcp (Ubuntu package)
linux-image-5.15.0-1035-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1036-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1038-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.15.0-1038-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2023-20938

Install updates from vendor's website.

Google Android - addressed in versions 10 2023-02-05, 11 2023-02-05, 12L 2023-02-05, 12 2023-02-05, 13 2023-02-05
kernel-tools - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel-debuginfo - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel-tools-debuginfo - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel-source - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel-tools-devel - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel-devel - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
bpftool-debuginfo - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
perf-debuginfo - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
python3-perf-debuginfo - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
python2-perf - update to 4.19.90-2303.3.0.0192
bpftool - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
python2-perf-debuginfo - update to 4.19.90-2303.3.0.0192
kernel-debugsource - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
perf - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
python3-perf - addressed in versions 4.19.90-2303.3.0.0192, 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.144.142, 5.15.0.72.77
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.144.142, 5.15.0.72.70
linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.144.142, 5.15.0.72.70
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.144.142, 5.15.0.72.70
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.144.142, 5.4.0.144.161~18.04.115
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.144.142, 5.4.0.144.161~18.04.115
linux-image-5.4.0-144-generic (Ubuntu package) - update to 5.4.0-144.161~18.04.1
linux-image-5.4.0-144-lowlatency (Ubuntu package) - update to 5.4.0-144.161~18.04.1
linux-image-5.4.0-144-generic-lpae (Ubuntu package) - update to 5.4.0-144.161~18.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.144.161~18.04.115
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.144.161~18.04.115
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.144.161~18.04.115
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.144.161~18.04.115
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.144.161~18.04.115
linux-image-5.4.0-1045-ibm (Ubuntu package) - update to 5.4.0-1045.50~18.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.4.0.1045.56, 5.4.0.1045.71, 5.15.0.1030.26
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1045.71
linux-image-bluefield (Ubuntu package) - update to 5.4.0.1059.54
linux-image-5.4.0-1059-bluefield (Ubuntu package) - update to 5.4.0-1059.65
linux-image-gkeop (Ubuntu package) - addressed in versions 5.4.0.1065.63, 5.15.0.1020.19
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1065.63
linux-image-5.4.0-1065-gkeop (Ubuntu package) - update to 5.4.0-1065.69
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1081.78
linux-image-5.4.0-1081-raspi (Ubuntu package) - addressed in versions 5.4.0-1081.92, 5.4.0-1081.92~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1081.111, 5.15.0.1029.26
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1081.111
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1087.81, 5.15.0.1033.29
linux-image-5.4.0-1087-kvm (Ubuntu package) - update to 5.4.0-1087.93
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1094.87
linux-image-5.4.0-1094-oracle (Ubuntu package) - update to 5.4.0-1094.103~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1094.103~18.04.68, 5.15.0.1035.30, 5.15.0.1035.41~20.04.1
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1095.100, 5.15.0.1033.32
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1095.100
linux-image-5.4.0-1095-gke (Ubuntu package) - update to 5.4.0-1095.102
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1097.75, 5.15.0.1036.40~20.04.25
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1097.94
linux-image-5.4.0-1097-aws (Ubuntu package) - update to 5.4.0-1097.105~18.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1101.77, 5.15.0.1033.41~20.04.1
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1101.103
linux-image-5.4.0-1101-gcp (Ubuntu package) - addressed in versions 5.4.0-1101.110, 5.4.0-1101.110~18.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1104.77, 5.15.0.1038.34, 5.15.0.1038.45~20.04.28
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1104.97
linux-image-5.4.0-1104-azure (Ubuntu package) - update to 5.4.0-1104.110~18.04.1
kernel-headers - addressed in versions 5.10.0-60.84.0.108, 5.10.0-136.22.0.98
kernel - addressed in versions 5.10.134-15, 5.10.134-16
kernel-headers - addressed in versions 5.10.134-15, 5.10.134-16
bpftool - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug - addressed in versions 5.10.134-15, 5.10.134-16
python3-perf - addressed in versions 5.10.134-15, 5.10.134-16
perf - addressed in versions 5.10.134-15, 5.10.134-16
kernel-tools-libs-devel - addressed in versions 5.10.134-15, 5.10.134-16
kernel-tools-libs - addressed in versions 5.10.134-15, 5.10.134-16
kernel-tools - addressed in versions 5.10.134-15, 5.10.134-16
kernel-modules-extra - addressed in versions 5.10.134-15, 5.10.134-16
kernel-modules - addressed in versions 5.10.134-15, 5.10.134-16
kernel-core - addressed in versions 5.10.134-15, 5.10.134-16
kernel-devel - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-modules-extra - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-modules - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-devel - addressed in versions 5.10.134-15, 5.10.134-16
kernel-debug-core - addressed in versions 5.10.134-15, 5.10.134-16
linux-image-generic-64k (Ubuntu package) - update to 5.15.0.72.70
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.72.77
linux-image-5.15.0-72-lowlatency-64k (Ubuntu package) - update to 5.15.0-72.79~20.04.1
linux-image-5.15.0-72-generic-64k (Ubuntu package) - update to 5.15.0-72.79~20.04.1
linux-image-5.15.0-72-generic-lpae (Ubuntu package) - update to 5.15.0-72.79~20.04.1
linux-image-5.15.0-72-generic (Ubuntu package) - update to 5.15.0-72.79~20.04.1
linux-image-5.15.0-72-lowlatency (Ubuntu package) - update to 5.15.0-72.79~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.30
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.30
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.72.79~20.04.33
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1020.19
linux-image-5.15.0-1020-gkeop (Ubuntu package) - update to 5.15.0-1020.25
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1029.26
linux-image-5.15.0-1029-raspi-nolpae (Ubuntu package) - update to 5.15.0-1029.31
linux-image-5.15.0-1029-raspi (Ubuntu package) - update to 5.15.0-1029.31
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1030.29, 5.15.0.1030.35~20.04.22
linux-image-5.15.0-1030-ibm (Ubuntu package) - update to 5.15.0-1030.33
linux-image-5.15.0-1030-intel-iotg (Ubuntu package) - update to 5.15.0-1030.35~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1030.35~20.04.22
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1033.32, 5.15.0.1033.38~20.04.1
linux-image-5.15.0-1033-gke (Ubuntu package) - addressed in versions 5.15.0-1033.38, 5.15.0-1033.38~20.04.1
linux-image-5.15.0-1033-kvm (Ubuntu package) - update to 5.15.0-1033.38
linux-image-5.15.0-1033-gcp (Ubuntu package) - update to 5.15.0-1033.41~20.04.1
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1034.30
linux-image-5.15.0-1034-gcp (Ubuntu package) - update to 5.15.0-1034.42+1
linux-image-5.15.0-1035-oracle (Ubuntu package) - addressed in versions 5.15.0-1035.41, 5.15.0-1035.41~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1036.35
linux-image-5.15.0-1036-aws (Ubuntu package) - update to 5.15.0-1036.40~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1038.34
linux-image-5.15.0-1038-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1038.45.1, 5.15.0-1038.45~20.04.1.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1038.45.15, 5.15.0.1038.45~20.04.1.17
linux-image-5.15.0-1038-azure (Ubuntu package) - update to 5.15.0-1038.45~20.04.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1038.45~20.04.28

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins