CVE-2023-51043: Use After Free

Published Jan 23, 2024
·
Updated

In the Linux kernel before 6.4.5 drivers/gpu/drm/drmatomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

Other sources

In the Linux kernel before 6.4.5, drivers/gpu/drm/drmatomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

— Launchpad

Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free due to a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.

— IBM

Affected Software

7 affected componentsFixes available
Linux Linux kernel<6.4.5
IBM QRadar SIEM<=7.5 - 7.5.0 UP8 IF01
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
redhat/Kernel<6.5
6.5
Microsoft cbl2 kernel 5.15.180.1-1
Patch available
Microsoft cbl2 kernel 5.15.180.1-1
Patch available
Microsoft cbl2 kernel 5.15.148.1-1
Patch available

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
  2. Upgrade

    Upgrade redhat/Kernel to a version that resolves this vulnerability.

    Fixed in 6.5
  3. Upgrade

    Upgrade Linux kernel to a version that resolves this vulnerability.

    Fixed in 6.4.5

Event History

Jan 23, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 24, 2024
Data Sourced
via Red Hat·05:58 AM
DescriptionSeverityAffected Software
Jan 30, 2024
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeaknessAffected Software
Apr 19, 2024
Data Sourced
via Launchpad·03:13 PM
Description
Apr 30, 2025
Data Sourced
via Ubuntu·11:50 PM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2023-51043?

CVE-2023-51043 is classified as a high severity vulnerability due to its use-after-free condition that can be exploited during a race condition.

2

How do I fix CVE-2023-51043?

To fix CVE-2023-51043, update your Linux kernel to version 6.4.5 or later.

3

What types of systems are affected by CVE-2023-51043?

CVE-2023-51043 affects various Linux kernel versions prior to 6.4.5, impacting systems using the kernel for GPU operations.

4

What is the risk of exploitation for CVE-2023-51043?

The risk of exploitation for CVE-2023-51043 includes potential denial of service or system instability due to unhandled race conditions.

5

Which Linux distributions are vulnerable to CVE-2023-51043?

Popular Linux distributions like Debian and Red Hat with versions below 6.4.5 are vulnerable to CVE-2023-51043.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203