CVE-2023-5633: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.

Affected products

Linux Linux Kernel: from 6.1.13, before 6.1.75 (fixed in 6.1.75); from 6.2, before 6.5.8 (fixed in 6.5.8); version 6.6 only
Red Hat Codeready Linux Builder: version 8.0 only; version 9.0 only
Red Hat Codeready Linux Builder Eus: version 8.8 only; version 9.2 only; version 9.4 only
Red Hat Codeready Linux Builder For ARM64: version 8.0_aarch64 only; version 9.0_aarch64 only
Red Hat Codeready Linux Builder For ARM64 Eus: version 8.8_aarch64 only; version 9.2_aarch64 only; version 9.4_aarch64 only
Red Hat Codeready Linux Builder For IBM Z Systems: version 9.0_s390x only
Red Hat Codeready Linux Builder For IBM Z Systems Eus: version 9.2_s390x only; version 9.4_s390x only
Red Hat Codeready Linux Builder For Power Little Endian: version 8.0_ppc64le only; version 9.0_ppc64le only
Red Hat Codeready Linux Builder For Power Little Endian Eus: version 8.8_ppc64le only; version 9.2_ppc64le only; version 9.4_ppc64le only
Red Hat Enterprise Linux: version 8.0 only; version 9.0 only
Red Hat Enterprise Linux Eus: version 8.8 only; version 9.2 only; version 9.4 only
Red Hat Enterprise Linux For Arm 64: version 8.0_aarch64 only; version 9.0_aarch64 only
Red Hat Enterprise Linux For Arm 64 Eus: version 8.8_aarch64 only; version 9.2_aarch64 only; version 9.4_aarch64 only
Red Hat Enterprise Linux For IBM Z Systems: version 8.0_s390x only; version 9.0_s390x only
Red Hat Enterprise Linux For IBM Z Systems Eus: version 8.8_s390x only; version 9.2_s390x only; version 9.4_s390x only
Red Hat Enterprise Linux For Power Little Endian: version 8.0_ppc64le only; version 9.0_ppc64le only
Red Hat Enterprise Linux For Power Little Endian Eus: version 9.2_ppc64le only; version 9.4_ppc64le only
Red Hat Enterprise Linux For Real Time: version 8.0 only; version 9.0 only
Red Hat Enterprise Linux For Real Time For Nfv: version 8.0 only; version 9.0 only
Red Hat Enterprise Linux Server Aus: version 9.2 only; version 9.4 only
Red Hat Enterprise Linux Server For Power Little Endian Update Services For SAP Solutions: version 8.8 only; version 9.2_ppc64le only
Red Hat Enterprise Linux Server Tus: version 8.8 only

Published 2023-10-23. Last modified 2026-06-17.