CVE-2023-39198: 
Linux Kernel vulnerability analysis and mitigation

A race condition vulnerability (CVE-2023-39198) was discovered in the QXL driver of the Linux kernel. The issue exists in the qxlmodedumbcreate() function which dereferences the qobj returned by the qxlgemobjectcreatewithhandle(), but the handle is the only one holding a reference to it (NVD).

The vulnerability is a race condition in the QXL virtual GPU driver that leads to a use-after-free condition. The issue occurs specifically in the qxlmodedumb_create() function where there is improper handling of object references. The vulnerability has been assigned a CVSS v3.1 base score of 6.4 (Medium) by NIST and 7.5 (High) by Red Hat (NVD).

If exploited, this vulnerability could allow an attacker to guess the returned handle value and trigger a use-after-free condition. This could potentially lead to denial of service (system crash) or privilege escalation (Ubuntu).

The vulnerability has been fixed in Linux kernel version 6.5-rc7 with commit c611589b4259ed63b9b77be6872b1ce07ec0ac16. Various Linux distributions have released patches for their affected versions. Users are advised to update their systems to the latest available kernel version (Bugzilla).