CVE-2023-52931
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-52931 is a recently identified vulnerability affecting the Linux kernel. Specifically, in the drm/i915 driver, a potential use-after-free issue has been discovered. This issue arises due to the addition of a virtual memory (vm) to the vm_xa table, making it visible to userspace. There is a risk of a race condition occurring between the kernel and userspace, which could lead to unintended memory access. The vulnerability has been addressed through commit 99343c46d4e2b34c285d3d5f68ff04274c2f9fb4, which ensures that the kernel takes its extra reference before adding it to the table.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX