CVE-2023-39198
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
25/100
Published: 2023-11-09
Modified: 2026-11-07
First seen: 2026-11-07
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
High
UI:
None
S:
Changed
C:
High
I:
High
A:
High
Description
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.
Weakness Classification (1)
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| fedoraproject | fedora | 38 |
| linux | linux_kernel | < 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
References & Advisories (6)
Issue Tracking
Third Party Advisory
Issue Tracking
Patch
Third Party Advisory