Wind River Support Network

HomeDefectsLIN1024-178

Acknowledged

LIN1024-178 : Security Advisory - mesa - CVE-2023-45913

Created: Apr 29, 2024 Updated: Jan 7, 2026

Resolved Date: May 12, 2024

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.

CREATE(Triage):(User=admin) CVE-2023-45913 (https://nvd.nist.gov/vuln/detail/CVE-2023-45913)