CVE-2023-5633

Katalog CVE

CVSS 7.8 · High EPSS 0,28%

Kerentanan Improper Update of Reference Count pada linux kernel, redhat codeready linux builder +20 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Rincian

Terbit di NVD

23 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-911: Improper Update of Reference Count
CWE-416: Use After Free

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2245663 issue tracking · patch
• https://access.redhat.com/errata/RHSA-2024:0113 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:0134 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:0461 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1404 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:4823 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:4831 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-5633 advisory pihak ketiga