← CVE Intelligence

CVE-2023-5633

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling PUBLISHED

Description (CNA)

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.11.1.rt7.313.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.11.1.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.51.1.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.18.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.18.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.75.1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.75.1.rt14.360.el9_2 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-911

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.