CVE-2023-54157

A flaw was found in the Linux kernel's binder component. A race condition exists in the binder_update_page_range() function when it interacts with munmap(), leading to a Use-After-Free (UAF) vulnerability. This occurs because the mmap read lock is insufficient to protect memory access during concurrent operations. A local attacker could exploit this flaw to cause memory corruption, potentially leading to privilege escalation or a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.