CVE-2023-20687: 
NixOS vulnerability analysis and mitigation

In display drm, there is a possible double free vulnerability due to a race condition (CVE-2023-20687). The vulnerability affects MediaTek chipsets running Android 12.0 and 13.0 operating systems. This vulnerability was discovered and disclosed in April 2023, specifically affecting MT6879, MT6895, MT6983, and MT8781 chipset models (MediaTek Bulletin).

The vulnerability is classified as a medium severity issue with a CVSS v3.1 base score of 6.4 (MEDIUM). It is categorized under CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization - Race Condition). The vulnerability exists in the display drm component and manifests as a potential double free condition due to improper synchronization in race conditions (NVD).

A successful exploitation of this vulnerability could lead to local escalation of privilege with System execution privileges. The vulnerability requires no user interaction for exploitation, potentially allowing an attacker to gain elevated system privileges (MediaTek Bulletin).

MediaTek has addressed this vulnerability through a security patch identified as ALPS07570772. The fix has been made available to device manufacturers, and affected users should ensure their devices are updated with the latest security patches (MediaTek Bulletin).