Use-after-free in Google Android - CVE-2023-21255

Vulnerability identifier: #VU77990

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-21255

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input within the binder_transaction_buffer_release() function in Binder subsystem in Android kernel. A local application can trigger a use-after-fee error and execute arbitrary code with elevated privileges.

Google Android
Debian Linux
Ubuntu
openEuler
linux-image-5.4.0-162-generic (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-162-lowlatency (Ubuntu package)
linux-image-5.4.0-1109-aws (Ubuntu package)
linux-image-5.4.0-1056-ibm (Ubuntu package)
linux-image-5.4.0-1093-raspi (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1112-gcp (Ubuntu package)
linux-image-5.4.0-1115-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.4.0-1108-oracle (Ubuntu package)
kernel
kernel-tools
bpftool
perf-debuginfo
python3-perf
python2-perf
kernel-devel
kernel-debugsource
perf
python3-perf-debuginfo
kernel-source
kernel-debuginfo
python2-perf-debuginfo
kernel-tools-debuginfo
bpftool-debuginfo
kernel-tools-devel
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-5.4.0-162-generic-lpae (Ubuntu package)
linux-image-5.4.0-1021-iot (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.4.0-1029-xilinx-zynqmp (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-bluefield (Ubuntu package)
linux-image-5.4.0-1070-bluefield (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-5.4.0-1076-gkeop (Ubuntu package)
linux-image-raspi2-hwe-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1098-kvm (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
kernel-headers
linux (Debian package)
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-83-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-83-generic (Ubuntu package)
linux-image-5.15.0-83-generic-lpae (Ubuntu package)
linux-image-5.15.0-83-lowlatency (Ubuntu package)
linux-image-5.15.0-83-generic-64k (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1027-gkeop (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1032-nvidia (Ubuntu package)
linux-image-5.15.0-1032-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1037-raspi (Ubuntu package)
linux-image-5.15.0-1037-ibm (Ubuntu package)
linux-image-5.15.0-1039-intel-iotg (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1041-gke (Ubuntu package)
linux-image-5.15.0-1041-kvm (Ubuntu package)
linux-image-5.15.0-1041-gcp (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1042-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1044-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1046-azure (Ubuntu package)
linux-image-5.15.0-1046-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-image-6.2.0-32-generic (Ubuntu package)
linux-image-6.2.0-32-generic-64k (Ubuntu package)
linux-image-6.2.0-32-generic-lpae (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1004-starfive (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.2.0-1009-ibm (Ubuntu package)
linux-image-6.2.0-1011-azure (Ubuntu package)
linux-image-6.2.0-1011-oracle (Ubuntu package)
linux-image-6.2.0-1011-aws (Ubuntu package)
linux-image-6.2.0-1012-kvm (Ubuntu package)
linux-image-6.2.0-1012-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1012-lowlatency (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1012-raspi (Ubuntu package)
linux-image-6.2.0-1013-gcp (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)

Install updates from vendor's website.

Google Android - addressed in versions 11 2023-07-05, 12L 2023-07-05, 12 2023-07-05, 13 2023-07-05
linux-image-5.4.0-162-generic (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-162.179
linux-image-oem-osp1 (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0.162.159
linux-image-oem (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.162.159
linux-image-aws (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1044.49~20.04.32, 6.2.0.1011.11~22.04.1, 6.2.0.1011.12
linux-image-generic-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-oracle (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1042.48~20.04.1, 6.2.0.1011.11
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-5.4.0-162-lowlatency (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-162.179
linux-image-5.4.0-1109-aws (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1109.118
linux-image-5.4.0-1056-ibm (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1056.61
linux-image-5.4.0-1093-raspi (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1093.104
linux-image-raspi-hwe-18.04 (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0.1093.123
linux-image-5.4.0-1112-gcp (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1112.121
linux-image-5.4.0-1115-azure (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1115.122
linux-image-azure (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1046.53~20.04.35, 6.2.0.1011.11
linux-image-gcp (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1041.49~20.04.1, 6.2.0.1013.13, 6.2.0.1013.13~22.04.1
linux-image-ibm (Ubuntu package) - addressed in versions Ubuntu Pro, 5.15.0.1037.33, 5.15.0.1037.40~20.04.9, 6.2.0.1009.9
linux-image-5.4.0-1108-oracle (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1108.117
kernel - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
kernel-tools - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
bpftool - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
perf-debuginfo - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
python3-perf - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
python2-perf - update to 4.19.90-2308.1.0.0212
kernel-devel - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
kernel-debugsource - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
perf - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
python3-perf-debuginfo - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
kernel-source - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
kernel-debuginfo - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
python2-perf-debuginfo - update to 4.19.90-2308.1.0.0212
kernel-tools-debuginfo - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
bpftool-debuginfo - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
kernel-tools-devel - addressed in versions 4.19.90-2308.1.0.0212, 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.162.159, 5.15.0.83.80, 6.2.0.32.32
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.162.159, 5.15.0.83.80, 6.2.0.32.32
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.162.159, 5.15.0.83.85, 6.2.0.1012.12
linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.162.159, 5.15.0.83.80, 6.2.0.32.32
linux-image-5.4.0-162-generic-lpae (Ubuntu package) - update to 5.4.0-162.179
linux-image-5.4.0-1021-iot (Ubuntu package) - update to 5.4.0-1021.22
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.4.0.1029.31
linux-image-5.4.0-1029-xilinx-zynqmp (Ubuntu package) - update to 5.4.0-1029.33
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1056.85
linux-image-bluefield (Ubuntu package) - update to 5.4.0.1070.65
linux-image-5.4.0-1070-bluefield (Ubuntu package) - update to 5.4.0-1070.76
linux-image-gkeop (Ubuntu package) - addressed in versions 5.4.0.1076.74, 5.15.0.1027.26
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1076.74
linux-image-5.4.0-1076-gkeop (Ubuntu package) - update to 5.4.0-1076.80
linux-image-raspi2-hwe-18.04 (Ubuntu package) - update to 5.4.0.1093.123
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1093.123
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1093.123, 5.15.0.1037.35, 6.2.0.1012.15
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1098.93, 5.15.0.1041.37, 6.2.0.1012.12
linux-image-5.4.0-1098-kvm (Ubuntu package) - update to 5.4.0-1098.104
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1108.101
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1109.106
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1112.114
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1115.108
kernel-headers - addressed in versions 5.10.0-60.105.0.132, 5.10.0-136.43.0.121, 5.10.0-153.21.0.97
linux (Debian package) - update to 5.10.191-1
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.83.80, 6.2.0.32.32
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.83.85, 6.2.0.1012.12
linux-image-5.15.0-83-lowlatency-64k (Ubuntu package) - update to 5.15.0-83.92~20.04.1
linux-image-5.15.0-83-generic (Ubuntu package) - update to 5.15.0-83.92~20.04.1
linux-image-5.15.0-83-generic-lpae (Ubuntu package) - update to 5.15.0-83.92~20.04.1
linux-image-5.15.0-83-lowlatency (Ubuntu package) - update to 5.15.0-83.92~20.04.1
linux-image-5.15.0-83-generic-64k (Ubuntu package) - update to 5.15.0-83.92~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.38
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.38
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.83.92~20.04.41
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1027.26, 5.15.0.1027.32~20.04.23
linux-image-5.15.0-1027-gkeop (Ubuntu package) - addressed in versions 5.15.0-1027.32, 5.15.0-1027.32~20.04.1
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1032.32
linux-image-5.15.0-1032-nvidia (Ubuntu package) - update to 5.15.0-1032.32
linux-image-5.15.0-1032-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1032.32
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1032.32
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1037.35, 6.2.0.1012.15
linux-image-5.15.0-1037-raspi (Ubuntu package) - update to 5.15.0-1037.40
linux-image-5.15.0-1037-ibm (Ubuntu package) - addressed in versions 5.15.0-1037.40, 5.15.0-1037.40~20.04.1
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1039.39
linux-image-5.15.0-1039-intel-iotg (Ubuntu package) - update to 5.15.0-1039.45
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1041.37
linux-image-gke (Ubuntu package) - update to 5.15.0.1041.40
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1041.40
linux-image-5.15.0-1041-gke (Ubuntu package) - update to 5.15.0-1041.46
linux-image-5.15.0-1041-kvm (Ubuntu package) - update to 5.15.0-1041.46
linux-image-5.15.0-1041-gcp (Ubuntu package) - addressed in versions 5.15.0-1041.49, 5.15.0-1041.49~20.04.1
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1042.37
linux-image-5.15.0-1042-oracle (Ubuntu package) - addressed in versions 5.15.0-1042.48, 5.15.0-1042.48~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1044.43
linux-image-5.15.0-1044-aws (Ubuntu package) - addressed in versions 5.15.0-1044.49, 5.15.0-1044.49~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1046.42
linux-image-5.15.0-1046-azure (Ubuntu package) - addressed in versions 5.15.0-1046.53, 5.15.0-1046.53~20.04.1
linux-image-5.15.0-1046-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1046.53.1, 5.15.0-1046.53~20.04.1.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1046.53~20.04.1.24
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1046.53~20.04.35
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1046.53.24
linux-image-6.2.0-32-generic (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-6.2.0-32-generic-64k (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-6.2.0-32-generic-lpae (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-6.2.0-1004-starfive (Ubuntu package) - update to 6.2.0-1004.5
linux-image-starfive (Ubuntu package) - update to 6.2.0.1004.7
linux-image-6.2.0-1009-ibm (Ubuntu package) - update to 6.2.0-1009.9
linux-image-6.2.0-1011-azure (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-oracle (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-aws (Ubuntu package) - update to 6.2.0-1011.11~22.04.1
linux-image-6.2.0-1012-kvm (Ubuntu package) - update to 6.2.0-1012.12
linux-image-6.2.0-1012-lowlatency-64k (Ubuntu package) - update to 6.2.0-1012.12~22.04.1
linux-image-6.2.0-1012-lowlatency (Ubuntu package) - update to 6.2.0-1012.12~22.04.1
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.2.0.1012.12~22.04.9
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1012.12~22.04.9
linux-image-6.2.0-1012-raspi (Ubuntu package) - update to 6.2.0-1012.14
linux-image-6.2.0-1013-gcp (Ubuntu package) - addressed in versions 6.2.0-1013.13, 6.2.0-1013.13~22.04.1

• https://source.android.com/docs/security/bulletin/2023-07-01
• https://android.googlesource.com/kernel/common/+/1ca1130ec62d

• Multiple vulnerabilities in Google Android
• Debian update for linux
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-azure
• Ubuntu update for linux-aws
• Ubuntu update for linux-azure
• Ubuntu update for linux-gke
• Ubuntu update for linux-gcp
• Ubuntu update for linux-gcp-5.15
• Ubuntu update for linux-azure-5.4
• Ubuntu update for linux-ibm
• Ubuntu update for linux-azure
• Ubuntu update for linux-intel-iotg
• Ubuntu update for linux-bluefield
• openEuler 20.03 LTS SP1 update for kernel
• openEuler 20.03 LTS SP3 update for kernel
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP2 update for kernel
• openEuler 22.03 LTS update for kernel