{"id":"PUB-A-274172774","details":"In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-274172774","CVE-2023-35693"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2023-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-07-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/8ff940b3513cb"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2023-07-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"severity":"Moderate","spl":"2023-07-05","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"147668398718898493696254713065507297666","length":557},"id":"PUB-A-274172774-09a9c4e3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8ff940b3513cb","target":{"file":"fs/incfs/vfs.c","function":"incfs_kill_sb"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8ff940b3513cb","target":{"file":"fs/incfs/sysfs.c"},"deprecated":false,"digest":{"line_hashes":["317623298360155804480847603858943826978","286797684893871088439582177009872234277","13944289991695254526414690106627011366","95156759624767745760832467227536731194","239508616836012936179614430994395196423","310979806062974541244701132447146868294","338057165287853370468109722864475736852","26105187676654218783835296149876656878","137751667071352925736977295178691446256"],"threshold":0.9},"id":"PUB-A-274172774-32b175dd"},{"target":{"file":"fs/incfs/vfs.c"},"deprecated":false,"digest":{"line_hashes":["155186012376764797888256866204956930662","7777813057297222156574016573197974264","325298259816957945185667684537015790690","180548179537029981850822467406377351727","128941389651242362300377522071866778238","84232795177472508567612016391657050435","24646550175687610893844767289677267840"],"threshold":0.9},"id":"PUB-A-274172774-b2a0104c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/8ff940b3513cb"}],"fixes":["https://android.googlesource.com/kernel/common/+/8ff940b3513cb"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-274172774.json"}}],"schema_version":"1.9.0"}