Log in Start free

Vulnerability · Published Oct 23, 2023 · Assigned by redhat

CVE-2023-5633Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

High 7.8

In plain English

A high-severity security flaw in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 79.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-abi-stablelists4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-core4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-cross-headers4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-debug4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-debug-core4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-debug-devel4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-debug-modules4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-debug-modules-extra4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-devel4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-doc4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-modules4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-modules-extra4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-tools4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-tools-libs4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-tools-libs-devel4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-zfcpdump4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-zfcpdump-core4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-zfcpdump-devel4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-zfcpdump-modules4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8perf4.18.0-513.11.1.el8_9ALSA-2024:0113
AlmaLinux:8python3-perf4.18.0-513.11.1.el8_9ALSA-2024:0113
Debian:12linux6.1.76-1DEBIAN-CVE-2023-5633
Debian:13linux6.5.8-1DEBIAN-CVE-2023-5633
Debian:14linux6.5.8-1DEBIAN-CVE-2023-5633
Rocky Linux:8kernel-rt0:4.18.0-513.11.1.rt7.313.el8_9RLSA-2024:0134
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1010.10~22.04.1UBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1009.9~22.04.1UBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1007.7UBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35USN-6688-1
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35UBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1008.8UBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1008.8USN-6503-1
Ubuntu:24.04:LTSlinux-raspi6.7.0-1001.1UBUNTU-CVE-2023-5633
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-5633
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-5633

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-911 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References