The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-modules-extra | Jan 18, 2024 | Oct 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 11, 2024 | Oct 23, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 23, 2023 |
| Oracle_linux | — | Upgrade kernel | Mar 7, 2024 | Sep 28, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 11, 2024 | Oct 23, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt | Mar 5, 2024 | Oct 23, 2023 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade dtb-allwinner | Dec 13, 2023 | Oct 23, 2023 |
| Ubuntu | — | Upgrade linux-image-6.5.0-13-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-6.5.0-1008-oemUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-azureUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04d | Nov 22, 2023 | Oct 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub