A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade rtlaUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-core | May 31, 2024 | Nov 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade perfUpgrade kernel-livepatch-4.14.334-252.552Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.205-194.804Upgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Jan 10, 2024 | Nov 9, 2023 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Nov 9, 2023 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Jan 29, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Feb 12, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 13, 2024 | Nov 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 12, 2024 | Nov 9, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Aug 17, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Nov 9, 2023 |
| Rocky_linux | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernelUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2024 | Nov 9, 2023 |
| Suse | — | Upgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-zfcpdump-manUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-baseUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-devel | Dec 13, 2023 | Nov 9, 2023 |
| Ubuntu | — | Upgrade linux-image-starfiveUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1017-aws | Dec 6, 2023 | Nov 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub