01 Record

CVE-2023-52973

vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.29% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 20.6% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-03-27 16:43Z1 YR AGO

Last updated

2026-08-05 09:12Z1 MO AGO

Reserved

2025-03-27

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

413bd91d759c6b62675d4b971b6beff9da403eb7456cd9ae29e64e3fbae929cc

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < af79ea9a2443016f64d8fd8d72020cc874f0e066, ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < 6332f52f44b9776568bf3c0b714ddfb0bb175e78, ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < d0332cbf53dad06a22189cc341391237f4ea6d9f, ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < 55515d7d8743b71b80bfe68e89eb9d92630626ab, ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < fc9e27f3ba083534b8bbf72ab0f5c810ffdc7d18, ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < 8506f16aae9daf354e3732bcfd447e2a97f023df, ac751efa6a0d70f2c9daef5c7e3a92270f5c2dff to < 226fae124b2dac217ea5436060d623ff3385bc34, 2.6.38—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/af79ea9a2443016f64d8fd8d72020cc874f0e066
git.kernel.orghttps://git.kernel.org/stable/c/6332f52f44b9776568bf3c0b714ddfb0bb175e78
git.kernel.orghttps://git.kernel.org/stable/c/d0332cbf53dad06a22189cc341391237f4ea6d9f
git.kernel.orghttps://git.kernel.org/stable/c/55515d7d8743b71b80bfe68e89eb9d92630626ab
git.kernel.orghttps://git.kernel.org/stable/c/fc9e27f3ba083534b8bbf72ab0f5c810ffdc7d18
git.kernel.orghttps://git.kernel.org/stable/c/8506f16aae9daf354e3732bcfd447e2a97f023df
git.kernel.orghttps://git.kernel.org/stable/c/226fae124b2dac217ea5436060d623ff3385bc34

01 Record index

CVE-2023-52973

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-52973

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References