The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade perfUpgrade kernel-debug-devel | Jan 18, 2024 | Oct 23, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 11, 2024 | Oct 23, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 23, 2023 |
| Oracle_linux | — | Upgrade kernel | Mar 7, 2024 | Sep 28, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jan 11, 2024 | Oct 23, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-devel | Mar 5, 2024 | Oct 23, 2023 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-source-vanilla | Dec 13, 2023 | Oct 23, 2023 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1009-azureUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-6.5.0-13-genericUpgrade linux-image-6.5.0-1008-oemUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-13-generic-64kUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1010-awsUpgrade linux-image-6.5.0-13-lowlatencyUpgrade linux-image-6.5.0-13-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1009-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1004-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1007-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1006-laptopUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1012-oracle | Nov 22, 2023 | Oct 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub