CVE-2023-0030

A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.

This issue is rated Moderate due to complexity, and a denial of service is only possible with the known attack scenario. The Red Hat Enterprise Linux not affected, because commit 9211092b378 "[drm] drm: Main backport to rebase from 4.18 to 5.1" applied already.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.