CVE-2023-21377: 
NixOS vulnerability analysis and mitigation

In SELinux Policy, there is a possible restriction bypass due to a permissions bypass that affects Android versions prior to 14.0. The vulnerability (CVE-2023-21377) was discovered and disclosed in October 2023. This vulnerability could lead to local information disclosure with no additional execution privileges needed and does not require user interaction for exploitation (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction, while potentially resulting in high confidentiality impact (NVD).

A successful exploitation of this vulnerability could allow an attacker to bypass SELinux policy restrictions and gain unauthorized access to information. The impact is limited to information disclosure, with no impact on system integrity or availability (NVD).

The vulnerability has been patched in Android 14.0. Users and organizations are advised to upgrade their Android devices to version 14.0 or later to protect against this vulnerability (Android Security Bulletin).