PT-2024-1382

CVE-2023-51043

·

Published

2023-07-21

·

Updated

2026-10-21

Description by

CVSS 4.0
7.3
High
MetricsAV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.5
Description The issue is related to a use-after-free condition in the Linux kernel, specifically in the drm atomic state init function within drivers/gpu/drm/drm atomic.c. This occurs due to a race condition between a nonblocking atomic commit and a driver unload, potentially allowing an attacker to execute arbitrary code.
Recommendations For Linux kernel versions prior to 6.4.5, update to version 6.4.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the drm atomic state init function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2024:2394
ALT-PU-2024-14046
ALT-PU-2024-6818
AZL-33970
CESA-2023_7077
CLSA-2024-1707478061
CLSA-2024-1709204660
CLSA-2024-1720468480
CLSA-2025-1742322442
INFSA-2024_2394
OESA-2024-1140
OESA-2024-1141
OESA-2024-1142
OESA-2024-1143
OESA-2024-1144
OPENSUSE-SU-2024_0469-1
OPENSUSE-SU-2024_0515-1
RHSA-2023:7077
RHSA-2023_7077
RHSA-2024:1018
RHSA-2024:1019
RHSA-2024:1188
RHSA-2024:1404
RHSA-2024:2394
RHSA-2024_2394
SUSE-SU-2024:0463-1
SUSE-SU-2024:0468-1
SUSE-SU-2024:0469-1
SUSE-SU-2024:0474-1
SUSE-SU-2024:0476-1
SUSE-SU-2024:0478-1
SUSE-SU-2024:0483-1
SUSE-SU-2024:0484-1
SUSE-SU-2024:0514-1
SUSE-SU-2024:0515-1
SUSE-SU-2024:0516-1
USN-6739-1
USN-6740-1
Found an issue in the description? Have something to add? Feel free to write us 👾