CVE-2023-21215

Summary

CVE-2023-21215 is a newly identified kernel vulnerability affecting the DevmemIntAcquireRemoteCtx function in devicemem_server.c. This issue involves a race condition, permitting an attacker to execute arbitrary code within the kernel, enabling local privilege escalation. No additional execution privileges are required, and user interaction is not necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.