NetSight
IP …
high7.8

CVE-2023-5633

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled wh…

Impact

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.1.13 before 6.1.75
from 6.2 before 6.5.8
Version 6.6
RedhatCodeready Linux Builder
Versions 8.0, 9.0
RedhatCodeready Linux Builder Eus
Versions 8.8, 9.2, 9.4
RedhatCodeready Linux Builder For Arm64
Versions 8.0_aarch64, 9.0_aarch64
RedhatCodeready Linux Builder For Arm64 Eus
Versions 8.8_aarch64, 9.2_aarch64, 9.4_aarch64
RedhatCodeready Linux Builder For Ibm Z Systems
Version 9.0_s390x
RedhatCodeready Linux Builder For Ibm Z Systems Eus
Versions 9.2_s390x, 9.4_s390x
RedhatCodeready Linux Builder For Power Little Endian
Versions 8.0_ppc64le, 9.0_ppc64le
RedhatCodeready Linux Builder For Power Little Endian Eus
Versions 8.8_ppc64le, 9.2_ppc64le, 9.4_ppc64le
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.8, 9.2, 9.4
RedhatEnterprise Linux For Arm 64
Versions 8.0_aarch64, 9.0_aarch64

Weakness classification

CWE-911CWE-416

References