CVE-2023-51043: Use After Free

Published Jan 23, 2024
·
Updated

In the Linux kernel before 6.4.5 drivers/gpu/drm/drmatomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

Other sources

In the Linux kernel before 6.4.5, drivers/gpu/drm/drmatomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

Launchpad

Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free due to a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.

IBM

Affected Software

7 affected componentsFixes available
Linux Linux kernel<6.4.5
IBM QRadar SIEM<=7.5 - 7.5.0 UP8 IF01
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
redhat/Kernel<6.5
6.5
Microsoft cbl2 kernel 5.15.180.1-1
Microsoft cbl2 kernel 5.15.180.1-1
Microsoft cbl2 kernel 5.15.148.1-1

Event History

Jan 23, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 24, 2024
Data Sourced
via Red Hat·05:58 AM
DescriptionSeverityAffected Software
Jan 30, 2024
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Updated
via Microsoft·08:00 AM
DescriptionSeverity
Apr 19, 2024
Data Sourced
via Launchpad·03:13 PM
Description
Apr 30, 2025
Data Sourced
via Ubuntu·11:50 PM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-51043?

CVE-2023-51043 is classified as a high severity vulnerability due to its use-after-free condition that can be exploited during a race condition.

2

How do I fix CVE-2023-51043?

To fix CVE-2023-51043, update your Linux kernel to version 6.4.5 or later.

3

What types of systems are affected by CVE-2023-51043?

CVE-2023-51043 affects various Linux kernel versions prior to 6.4.5, impacting systems using the kernel for GPU operations.

4

What is the risk of exploitation for CVE-2023-51043?

The risk of exploitation for CVE-2023-51043 includes potential denial of service or system instability due to unhandled race conditions.

5

Which Linux distributions are vulnerable to CVE-2023-51043?

Popular Linux distributions like Debian and Red Hat with versions below 6.4.5 are vulnerable to CVE-2023-51043.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203