CVE-2023-5633 : faille élevée linux linux kernel (CVSS 7.8)

Description

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

En bref

Sévérité: Élevée (CVSS 7.8)
Vecteur CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation active: Non signalée par la CISA
Publication: 23 oct. 2023
Dernière mise à jour: 17 juin 2026

Produits concernés

linux linux kernel
redhat codeready linux builder
redhat codeready linux builder eus
redhat codeready linux builder for arm64
redhat codeready linux builder for arm64 eus
redhat codeready linux builder for ibm z systems
redhat codeready linux builder for ibm z systems eus
redhat codeready linux builder for power little endian
redhat codeready linux builder for power little endian eus
redhat enterprise linux
redhat enterprise linux eus
redhat enterprise linux for arm 64
redhat enterprise linux for arm 64 eus
redhat enterprise linux for ibm z systems
redhat enterprise linux for ibm z systems eus
redhat enterprise linux for power little endian
redhat enterprise linux for power little endian eus
redhat enterprise linux for real time
redhat enterprise linux for real time for nfv
redhat enterprise linux server aus

Description

En bref

Produits concernés

Références