CVE-2023-21102

Updated: 2023-05-25

CWE: Unspecified

Description:

In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel

CVSS3: 7.8


Vendor State

OS Vendor version Errata
Ubuntu 22.04 5.15.0-70.77 USN-6025-1
Ubuntu 22.04 AWS 5.15.0-1034.38 USN-6025-1
Ubuntu 22.04 Azure 5.15.0-1036.43 USN-6025-1

KernelCare State

OS Original kernel version State
Debian 11
Planned
Ubuntu 22.04
Will Not Fix
Ubuntu 22.04 AWS
Will Not Fix
Ubuntu 22.04 Azure
Will Not Fix