CVE-2023-52931

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 416

Summary

CVE-2023-52931 is a recently identified vulnerability affecting the Linux kernel. Specifically, in the drm/i915 driver, a potential use-after-free issue has been discovered. This issue arises due to the addition of a virtual memory (vm) to the vm_xa table, making it visible to userspace. There is a risk of a race condition occurring between the kernel and userspace, which could lead to unintended memory access. The vulnerability has been addressed through commit 99343c46d4e2b34c285d3d5f68ff04274c2f9fb4, which ensures that the kernel takes its extra reference before adding it to the table.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share