Vulnerabilities > CVE-2023-5633 - Use After Free vulnerability in multiple products

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
linux
redhat
CWE-416
NVD
Published: 2023-10-23
Updated: 2024-11-21

Summary

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Vulnerable Configurations

Part Description Count
OS
Linux
159
OS
Redhat
28
Application
Redhat
18

Common Weakness Enumeration (CWE)

References