PT-2023-6463 · Linux+8 · Linux Kernel+8

Mauro Matteo Cascella · Published 2023-09-28 · Updated 2026-02-25 · CVE-2023-5633

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of memory after it has been freed in the vmwgfx kernel module of Linux operating systems. This could potentially allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-911

CWE-416

Related Identifiers

ALSA-2024:0113

ALT-PU-2023-7004

ALT-PU-2023-7787

ALT-PU-2023-7838

ALT-PU-2024-6818

AZL-31760

BDU:2023-07182

CESA-2024_0113

CESA-2024_0134

CVE-2023-5633

MGASA-2023-0328

MGASA-2023-0331

OPENSUSE-SU-2023_4730-1

OPENSUSE-SU-2023_4732-1

OPENSUSE-SU-2023_4734-1

RHSA-2024:0113

RHSA-2024:0134

RHSA-2024:0461

RHSA-2024:1404

RHSA-2024:4823

RHSA-2024:4831

RHSA-2024_0113

RHSA-2024_0134

RHSA-2024_0461

RLSA-2024:0134

SUSE-SU-2023:4730-1

SUSE-SU-2023:4732-1

SUSE-SU-2023:4734-1

SUSE-SU-2025:03601-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:3725-1

USN-6503-1

USN-6537-1

USN-6572-1

USN-6688-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 678

• https://osv.dev/vulnerability/MGASA-2023-0328 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26598 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52451 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0113 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4732-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07182 · Security Note
• https://advisories.mageia.org/MGASA-2023-0328.html · Security Note
• https://access.redhat.com/errata/RHSA-2024:4823 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03633-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0461.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5717 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-50431 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52599 · Vendor Advisory