Use After Free in Linux
CVE-2023-52931
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vm_xa table makes it visible to userspace, which could try to race with us to close the vm. So we need to take our extra reference before putting it in the table. (cherry picked from commit 99343c46d4e2b34c285d3d5f68ff04274c2f9fb4)
Vulnerability class: Use-After-Free
EPSS: 0.002 (12.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 9ec8795e7d91bc650db03dc6f5315667555dae11, 5.16, 0
- Linux Linux_kernel — versions 6.2
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-52931?
- CVE-2023-52931 is a high-severity vulnerability in Linux, classified under Use After Free. CVSS score: 7.8/10. Published 2025-03-27.
- How severe is CVE-2023-52931?
- High severity. CVSS v3 base score is 7.8 out of 10.