CVE-2023-52935

A vulnerability was found in the Linux kernel's memory management subsystem in the retract_page_tables() function. A race condition involving locks during page table removal may cause a use-after-free scenario.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local system access and precise timing to win a complex race condition. An authenticated local attacker could trigger a synchronization race during kernel transparent huge page management when processes share memory mappings, potentially leading to a use-after-free condition or kernel crash. While successful exploitation could result in denial of service or elevated privileges, the high complexity and prerequisite local access prevent a higher severity rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.