Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Shanzhulig

#39292of 53,635
7Total CVSS
Vulnerabilities · 1
PT-2024-1382
7.0
2023-07-21
Linux · Linux Kernel · CVE-2023-51043
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.4.5 **Description** The issue is related to a use-after-free condition in the Linux kernel, specifically in the `drm atomic state init` function within `drivers/gpu/drm/drm atomic.c`. This occurs due to a race condition between a nonblocking atomic commit and a driver unload, potentially allowing an attacker to execute arbitrary code. **Recommendations** For Linux kernel versions prior to 6.4.5, update to version 6.4.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `drm atomic state init` function until a patch is available.