Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-21264: Linux kernel can let attackers gain admin rights

CVE-2023-21264 · published 3 years ago

Summary

The Linux kernel code has a flaw that could let a malicious program running on the system read memory it shouldn't and then take full control of the machine. This can happen without any user interaction. Apply the latest security updates for your Linux distribution as soon as possible to close the gap.

What to do

Update debian rootio-linux to version 6.1.164-1.root.io.108.
Update debian rootio-linux to version 6.1.172-1.root.io.132.
Update debian linux to version 6.3.7-1.
Update google :linux_kernel: to version :2023-08-05.
Update linux to version 6.1.190-1.aikido.167.
Update rootio-linux to version 6.1.190-1.aikido.167.

Affected software

Ecosystem	Vendor	Product	Affected versions
Root:Debian:12	debian	rootio-linux	< 6.1.164-1.root.io.108 < 6.1.172-1.root.io.132 Fix: upgrade to 6.1.164-1.root.io.108
Debian:12	debian	linux	All versions
Debian:13	debian	linux	< 6.3.7-1 Fix: upgrade to 6.3.7-1
Debian:14	debian	linux	< 6.3.7-1 Fix: upgrade to 6.3.7-1
Android	google	:linux_kernel:	>= :0, < :2023-08-05 Fix: upgrade to :2023-08-05
–	google	android	All versions `cpe:2.3:o:google:android:-:::::::*`
Root:Debian:12	–	linux	< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
Root:Debian:12	–	rootio-linux	< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167

Original advisory text

CVE-2023-21264 in linux - Patched by Root

In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

References

https://security-tracker.debian.org/tracker/CVE-2023-21264 Vendor Advisory
https://android.googlesource.com/kernel/common/+/53625a846a7b4 Patch
https://source.android.com/security/bulletin/2023-08-01 Vendor Advisory
https://android.googlesource.com/kernel/common/+/b35a06182451f Patch

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

6.7 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published1 Aug 2023

Updated4 Nov 2026

First seen29 Mar 2026

Sources

ROOT-OS-DEBIAN-12-CVE-2023-21264 · OSV

CVE-2023-21264 · NVD

DEBIAN-CVE-2023-21264 · OSV

ASB-A-279739439 · OSV

Track software like this

Free during beta