The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-modules | Jan 18, 2024 | Oct 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 11, 2024 | Oct 23, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 23, 2023 |
| Oracle_linux | — | Upgrade kernel | Mar 7, 2024 | Sep 28, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 11, 2024 | Oct 23, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-devel | Mar 5, 2024 | Oct 23, 2023 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-devel | Dec 13, 2023 | Oct 23, 2023 |
| Ubuntu | — | Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-genericUpgrade linux-image-6.5.0-13-genericUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1008-oemUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-awsUpgrade linux-image-raspi-nolpae | Nov 22, 2023 | Oct 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub