CVE-2023-21106: Double Free
In adrenosetparam of adrenogpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265016072References: Upstream kernel
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-21106?
CVE-2023-21106 has a high severity due to the potential for local escalation of privilege.
How do I fix CVE-2023-21106?
To fix CVE-2023-21106, ensure that your Android version is updated to the latest patched releases, such as 5.10.223-1 or newer.
What platforms are affected by CVE-2023-21106?
CVE-2023-21106 affects various versions of the Android kernel, primarily those shipped with Google Android devices.
Is user interaction required to exploit CVE-2023-21106?
No, user interaction is not needed for the exploitation of CVE-2023-21106.
What type of vulnerability is CVE-2023-21106?
CVE-2023-21106 is classified as a memory corruption vulnerability caused by a double free in the adreno set parameter function.