Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-5633

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Published

2023-10-23T22:15:09.430

Last Modified

2024-11-21T08:42:09.727

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-416
  • Type: Primary
    CWE-416
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 6.1.75 Yes
Operating System linux linux_kernel < 6.5.8 Yes
Operating System linux linux_kernel 6.6 Yes
Operating System linux linux_kernel 6.6 Yes
Operating System linux linux_kernel 6.6 Yes
Operating System linux linux_kernel 6.6 Yes
Operating System linux linux_kernel 6.6 Yes
Operating System linux linux_kernel 6.6 Yes
Application redhat codeready_linux_builder 8.0 Yes
Application redhat codeready_linux_builder 9.0 Yes
Application redhat codeready_linux_builder_eus 8.8 Yes
Application redhat codeready_linux_builder_eus 9.2 Yes
Application redhat codeready_linux_builder_eus 9.4 Yes
Application redhat codeready_linux_builder_for_arm64 8.0_aarch64 Yes
Application redhat codeready_linux_builder_for_arm64 9.0_aarch64 Yes
Application redhat codeready_linux_builder_for_arm64_eus 8.8_aarch64 Yes
Application redhat codeready_linux_builder_for_arm64_eus 9.2_aarch64 Yes
Application redhat codeready_linux_builder_for_arm64_eus 9.4_aarch64 Yes
Application redhat codeready_linux_builder_for_ibm_z_systems 9.0_s390x Yes
Application redhat codeready_linux_builder_for_ibm_z_systems_eus 9.2_s390x Yes
Application redhat codeready_linux_builder_for_ibm_z_systems_eus 9.4_s390x Yes
Application redhat codeready_linux_builder_for_power_little_endian 8.0_ppc64le Yes
Application redhat codeready_linux_builder_for_power_little_endian 9.0_ppc64le Yes
Application redhat codeready_linux_builder_for_power_little_endian_eus 8.8_ppc64le Yes
Application redhat codeready_linux_builder_for_power_little_endian_eus 9.2_ppc64le Yes
Application redhat codeready_linux_builder_for_power_little_endian_eus 9.4_ppc64le Yes
Operating System redhat enterprise_linux 8.0 Yes
Operating System redhat enterprise_linux 9.0 Yes
Operating System redhat enterprise_linux_eus 8.8 Yes
Operating System redhat enterprise_linux_eus 9.2 Yes
Operating System redhat enterprise_linux_eus 9.4 Yes
Operating System redhat enterprise_linux_for_arm_64 8.0_aarch64 Yes
Operating System redhat enterprise_linux_for_arm_64 9.0_aarch64 Yes
Operating System redhat enterprise_linux_for_arm_64_eus 8.8_aarch64 Yes
Operating System redhat enterprise_linux_for_arm_64_eus 9.2_aarch64 Yes
Operating System redhat enterprise_linux_for_arm_64_eus 9.4_aarch64 Yes
Operating System redhat enterprise_linux_for_ibm_z_systems 8.0_s390x Yes
Operating System redhat enterprise_linux_for_ibm_z_systems 9.0_s390x Yes
Operating System redhat enterprise_linux_for_ibm_z_systems_eus 8.8_s390x Yes
Operating System redhat enterprise_linux_for_ibm_z_systems_eus 9.2_s390x Yes
Operating System redhat enterprise_linux_for_ibm_z_systems_eus 9.4_s390x Yes
Operating System redhat enterprise_linux_for_power_little_endian 8.0_ppc64le Yes
Operating System redhat enterprise_linux_for_power_little_endian 9.0_ppc64le Yes
Operating System redhat enterprise_linux_for_power_little_endian_eus 9.2_ppc64le Yes
Operating System redhat enterprise_linux_for_power_little_endian_eus 9.4_ppc64le Yes
Operating System redhat enterprise_linux_for_real_time 8.0 Yes
Operating System redhat enterprise_linux_for_real_time 9.0 Yes
Operating System redhat enterprise_linux_for_real_time_for_nfv 8.0 Yes
Operating System redhat enterprise_linux_for_real_time_for_nfv 9.0 Yes
Operating System redhat enterprise_linux_server_aus 9.2 Yes
Operating System redhat enterprise_linux_server_aus 9.4 Yes
Operating System redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions 8.8 Yes
Operating System redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions 9.2_ppc64le Yes
Operating System redhat enterprise_linux_server_tus 8.8 Yes
References