Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2023-39198

A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.

  • Published: Nov 9, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-39198
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.5-rc1 6.5-rc1.x
linux / linux_kernel - 6.5
linux / linux_kernel 6.5-rc2 6.5-rc2.x
linux / linux_kernel 6.5-rc3 6.5-rc3.x
linux / linux_kernel 6.5-rc4 6.5-rc4.x
linux / linux_kernel 6.5-rc5 6.5-rc5.x
linux / linux_kernel 6.5-rc6 6.5-rc6.x
fedoraproject / fedora 38 38.x
redhat / enterprise_linux 8.0 8.0.x
redhat / enterprise_linux 9.0 9.0.x