The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules | Jan 18, 2024 | Oct 23, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 11, 2024 | Oct 23, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 23, 2023 |
| Oracle_linux | — | Upgrade kernel | Mar 7, 2024 | Sep 28, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 11, 2024 | Oct 23, 2023 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo | Mar 5, 2024 | Oct 23, 2023 |
| Suse | — | Upgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-azureUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade ocfs2-kmp-default | Dec 13, 2023 | Oct 23, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1009-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-6.5.0-1008-oemUpgrade linux-image-6.5.0-13-genericUpgrade linux-image-awsUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1012-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-13-lowlatency-64k | Nov 22, 2023 | Oct 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub