CVE-2023-46139: KernelSU is a Kernel based root solution for Android

Routine

MEDIUM 5.0UPGRADE

CVE-2023-46139 is a medium-severity flaw (CVSS 5.0) affecting kernelsu. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privileges on the device. The vulnerable verification logic actually obtains the signature of the last block with an id of `0x7109871a`, while the verification logic during Android installation is to obtain the firs

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	5.0 (Medium)
Attack vector	Local
Attack complexity	High
Privileges needed	Low
User interaction	Required
EPSS exploit chance	0.2% (top 93%)
CISA exploited list	No
Weakness	CWE-863
Published	2023-10-31
Last modified	2026-06-17

Publisher (CNA): GitHub, Inc. · Vendor: kernelsu

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-10-31 00:15 UTCPublished CVE record published
2026-06-17 06:30 UTCUpdated Record last modified

kernelsu kernelsu UPGRADE

Affected: >= 0.6.1 and < 0.7.0

Fixed in: 0.7.0

Safe to downgrade to: a release before 0.6.1

1. Check installed version

apt-cache policy kernelsu || rpm -q kernelsu || kernelsu --version

2. UPGRADE to 0.7.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade kernelsu

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade kernelsu

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 0.6.1 (Debian / Ubuntu)

apt-cache madison kernelsu sudo apt install kernelsu=<VERSION_BEFORE_0.6.1> sudo apt-mark hold kernelsu

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list kernelsu sudo dnf downgrade kernelsu-<VERSION_BEFORE_0.6.1> sudo dnf versionlock add kernelsu

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-46139?

kernelsu: upgrade to 0.7.0. Exact commands for each OS are on this page.

Is CVE-2023-46139 being exploited?

CVE-2023-46139 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-46139 affect?

CVE-2023-46139 affects kernelsu. Severity is medium (CVSS 5.0). KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privi

How urgent is CVE-2023-46139?

Priority 19/100. No elevated risk signals yet.

Software pages

Android vulnerabilities

Related CVEs

CVE-2023-5521 CRITICAL 9.8 UPGRADE Incorrect Authorization in GitHub repository tiann/kernelsu prior to v0.6.9.
CVE-2023-49794 MEDIUM 6.7 UPGRADE KernelSU is a Kernel-based root solution for Android devices

References

← Back to latest CVEs