Yüksek CVSS 7.8
CVE-2023-5633: Linux Kernel: güvenlik açığı
Açıklama (NVD)
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,28 (yüzdelik 20)
- CWE
- CWE-911
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 6.1.13 | — | 6.1.75 |
| linux-linux-kernel | 6.2 | — | 6.5.8 |
| linux-linux-kernel | 6.6 | 6.6 | — |
| linux-linux-kernel | 6.6 | 6.6 | — |
| linux-linux-kernel | 6.6 | 6.6 | — |
| linux-linux-kernel | 6.6 | 6.6 | — |
| linux-linux-kernel | 6.6 | 6.6 | — |
| linux-linux-kernel | 6.6 | 6.6 | — |
| redhat-codeready-linux-builder | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder | 9.0 | 9.0 | — |
| redhat-codeready-linux-builder-eus | 8.8 | 8.8 | — |
| redhat-codeready-linux-builder-eus | 9.2 | 9.2 | — |
| redhat-codeready-linux-builder-eus | 9.4 | 9.4 | — |
| redhat-codeready-linux-builder-for-arm64 | 8.0_aarch64 | 8.0_aarch64 | — |
| redhat-codeready-linux-builder-for-arm64 | 9.0_aarch64 | 9.0_aarch64 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 8.8_aarch64 | 8.8_aarch64 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 9.2_aarch64 | 9.2_aarch64 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 9.4_aarch64 | 9.4_aarch64 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems | 9.0_s390x | 9.0_s390x | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 9.2_s390x | 9.2_s390x | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 9.4_s390x | 9.4_s390x | — |
| redhat-codeready-linux-builder-for-power-little-endian | 8.0_ppc64le | 8.0_ppc64le | — |
| redhat-codeready-linux-builder-for-power-little-endian | 9.0_ppc64le | 9.0_ppc64le | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 8.8_ppc64le | 8.8_ppc64le | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 9.2_ppc64le | 9.2_ppc64le | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 9.4_ppc64le | 9.4_ppc64le | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux-eus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-eus | 9.2 | 9.2 | — |