CVE-2023-54202
kernel: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · August 5, 2026
Description
A use-after-free vulnerability was found in the Intel i915 GPU driver's performance monitoring subsystem. A race condition between adding and removing OA configurations allows dereferencing a freed object.
Statement
Exploitation requires Intel GPU hardware and the ability to issue i915 perf ioctls, which typically needs render node access. The race window is narrow, making reliable exploitation difficult.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-366 · Race Condition within a Thread