CVE-2023-33094: Use After Free in Linux Graphics
Memory corruption while running VK synchronization with KASAN enabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05 - Upgrade
Upgrade
android/platform/vendor/qcom/opensource/graphics-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33094?
CVE-2023-33094 is considered a critical vulnerability due to its impact on memory corruption during VK synchronization.
How do I fix CVE-2023-33094?
To mitigate CVE-2023-33094, update your software to the latest version provided by the vendor that addresses this vulnerability.
What types of products are affected by CVE-2023-33094?
CVE-2023-33094 affects several Qualcomm firmware products and the Google Android operating system.
Can CVE-2023-33094 lead to remote code execution?
Yes, CVE-2023-33094 could potentially allow an attacker to execute arbitrary code due to the memory corruption issue.
Is there a workaround for CVE-2023-33094?
Currently, the recommended action for CVE-2023-33094 is to apply the patches issued by vendors rather than relying on workarounds.