{"id":"ASB-A-265016072","details":"In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-265016072","CVE-2023-21106"],"modified":"2026-03-11T06:27:25.516675Z","published":"2023-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-05-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/8103d53f25ec7"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2023-05-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/8103d53f25ec7"],"vanir_signatures":[{"target":{"file":"drivers/gpu/drm/msm/adreno/adreno_gpu.c"},"signature_type":"Line","deprecated":false,"id":"ASB-A-265016072-09a23a07","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8103d53f25ec7","digest":{"threshold":0.9,"line_hashes":["137499823065546987751838243333912764874","313781014223327949248879367044420520162","143690902458475044838598812343736842239","70078867355138051369967558370536672710","317807581993598243132077952695981339857","247812858636199983564700080281754340264"]}},{"target":{"file":"drivers/gpu/drm/msm/msm_gpu.c"},"signature_type":"Line","deprecated":false,"id":"ASB-A-265016072-3e0a3903","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8103d53f25ec7","digest":{"threshold":0.9,"line_hashes":["118492932545520791641655017401360173934","163526697256376568562232606184995229554","217608385893849329291499603075213132191"]}},{"target":{"function":"adreno_set_param","file":"drivers/gpu/drm/msm/adreno/adreno_gpu.c"},"signature_type":"Function","deprecated":false,"id":"ASB-A-265016072-b1fc8290","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8103d53f25ec7","digest":{"function_hash":"38937292462211299424417340593056186837","length":901}},{"target":{"function":"get_comm_cmdline","file":"drivers/gpu/drm/msm/msm_gpu.c"},"signature_type":"Function","deprecated":false,"id":"ASB-A-265016072-fa78c0d6","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8103d53f25ec7","digest":{"function_hash":"172533765802362585631188051682220935161","length":451}}],"spl":"2023-05-05","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-265016072.json"}}],"schema_version":"1.7.5"}