CVE-2023-5633: Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
Last updated 30 August 2024
Other sources
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw in the way memory objects were handled. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.
— IBM
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-5633?
CVE-2023-5633 is a vulnerability that involves a reference count issue leading to a use-after-free in surface handling.
What is the severity of CVE-2023-5633?
CVE-2023-5633 has a severity rating of 7.8, which is considered high.
What software is affected by CVE-2023-5633?
The affected software is the Red Hat kernel version up to exclusive 6.6.
How can I fix the CVE-2023-5633 vulnerability?
To fix the CVE-2023-5633 vulnerability, you need to update your Red Hat kernel to a version higher than 6.6.
What is the Common Weakness Enumeration (CWE) for CVE-2023-5633?
The CVE-2023-5633 vulnerability is associated with CWE-416, which is a use-after-free vulnerability.