A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-develUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade perfUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-devel | May 31, 2024 | Nov 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.205-194.804Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.334-252.552Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfo | Jan 10, 2024 | Nov 9, 2023 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Nov 9, 2023 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jan 29, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headers | Feb 12, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade perf | Mar 13, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 12, 2024 | Nov 9, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Aug 17, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 23, 2024 | Nov 9, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debug | Jun 17, 2024 | Nov 9, 2023 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdump-manUpgrade kernel-preemptUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade kernel-debug-baseUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade kselftests-kmp-rt | Dec 13, 2023 | Nov 9, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-intelUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-91-genericUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1044-raspi | Dec 6, 2023 | Nov 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub