CVE-2023-5633

HIGH

Linux Kernel 6.1.13-6.1.75 - Use-After-Free in Surface Memory Handling

Title source: llm
STIX 2.1

Description

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

References (8)

Core 8
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0113
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0134
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0461
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1404
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:4823
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:4831
Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-5633
Issue Tracking, Patch issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2245663

Scores

CVSS v3 7.8
EPSS 0.0001
EPSS Percentile 3.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416 CWE-911
Status published
Products (45)
linux/linux_kernel 6.6 rc1 (6 CPE variants)
linux/linux_kernel 6.1.13 - 6.1.75
redhat/codeready_linux_builder 8.0
redhat/codeready_linux_builder 9.0
redhat/codeready_linux_builder_eus 8.8
redhat/codeready_linux_builder_eus 9.2
redhat/codeready_linux_builder_eus 9.4
redhat/codeready_linux_builder_for_arm64 8.0_aarch64
redhat/codeready_linux_builder_for_arm64 9.0_aarch64
redhat/codeready_linux_builder_for_arm64_eus 8.8_aarch64
... and 35 more
Published Oct 23, 2023
Tracked Since Feb 18, 2026