CVE-2023-21102: High severity Google Android vulnerability
In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
Other sources
In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed.
Reference: https://android.googlesource.com/kernel/common/+/ec6fe823507b2f6ef4a58f3a9bee9a5ec086c32c%5E%21/ https://source.android.com/docs/security/bulletin/2023-05-01
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Kernelto a version that resolves this vulnerability.Fixed in 6.2 - Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2023-05-05 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-21102?
CVE-2023-21102 has the potential for local escalation of privilege due to a bypass of shadow stack protection.
How do I fix CVE-2023-21102?
To fix CVE-2023-21102, you should update the Linux kernel to version 6.2 or later or to one of the specific patched versions provided by your Linux distribution.
Which software is affected by CVE-2023-21102?
CVE-2023-21102 affects Google Android and various versions of the Linux kernel including specific versions from Debian and Red Hat.
What type of vulnerability is CVE-2023-21102?
CVE-2023-21102 is categorized as a logic error vulnerability leading to a possible bypass of security mechanisms.
Can CVE-2023-21102 be exploited remotely?
CVE-2023-21102 requires local access to the system for exploitation, as it involves escalation of privilege.