Unscored CVE-2023-35693 EUVD-2023-39693GHSA-4f25-fpfx-v6v9

In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of p…

Published Jul 12, 2023 · Updated Nov 1, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Advisories 1

WID-SEC-2023-1669 Android Patchday Juli 2023 BSI CERT-Bund (WID) · Sep 6, 2023

References

https://android.googlesource.com/kernel/common/+/8ff940b3513cb
https://source.android.com/security/bulletin/pixel/2023-07-01