A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-develUpgrade libperfUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64kUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-tools-libs | May 31, 2024 | Nov 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.205-194.804Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-4.14.334-252.552Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-tools-debuginfoUpgrade perf-debuginfo | Jan 10, 2024 | Nov 9, 2023 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Nov 9, 2023 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jan 29, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf | Feb 12, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-headers | Mar 13, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Feb 12, 2024 | Nov 9, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Aug 17, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Nov 9, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-rt-debug | Jun 17, 2024 | Nov 9, 2023 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade dtb-exynosUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-preemptUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-baseUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-freescale | Dec 13, 2023 | Nov 9, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1051-awsUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1017-awsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1018-azureUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-6.2.0-1010-starfive | Dec 6, 2023 | Nov 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub