CVE-2023-21218

Summary

CVE-2023-21218 is a newly discovered kernel vulnerability affecting the PMRChangeSparseMemOSMem function in physmem_osmem_linux.c. This issue involves an incorrect bounds check leading to a possible out-of-bounds write. The consequences of this vulnerability are significant, as it enables local privilege escalation within the kernel, allowing an attacker to elevate their privileges without requiring any additional execution privileges. Notably, user interaction is not required for successful exploitation of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.