CVE-2023-45913
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function...
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
- Record
CVE-2023-45913- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2023-50176
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
- Record
EUVD-2023-50176- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q4fq-56x3-rq98
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function...
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
- Record
GHSA-q4fq-56x3-rq98- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
- Record
CVE-2023-45913- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
- Record
CVE-2023-45913- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-45913
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
- Record
DEBIAN-CVE-2023-45913- CVSS 3.1
- 6.2 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVopenSUSE-SU-2024:14475-1 No score
Mesa-24.2.6-392.1 on GA media
These are all security issues fixed in the Mesa-24.2.6-392.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14475-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3526-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).
- Record
SUSE-SU-2024:3526-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3540-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)
- Record
SUSE-SU-2024:3540-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3544-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#CVE-2023-45922).
- Record
SUSE-SU-2024:3544-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3548-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)
- Record
SUSE-SU-2024:3548-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02803-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040)
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041)
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042)
- Record
SUSE-SU-2025:02803-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20082-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).
- Record
SUSE-SU-2025:20082-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20664-1 No score
Security update for Mesa
This update for Mesa fixes the following issues:
- CVE-2023-45913: NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
- CVE-2023-45919: Buffer over-read in glXQueryServerString() (bsc#1222041).
- CVE-2023-45922: Segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).
- Record
SUSE-SU-2025:20664-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mesaDebian:12 |
All versions, plus listed versions 22.3.6-1+deb12u122.3.6-1+deb12u223.0.0-123.0.0~rc1-123.0.0~rc4-1 Show 45 moreShow less23.0.1-123.0.2-123.1.0-123.1.0~rc2-123.1.0~rc3-123.1.1-123.1.2-123.1.3-123.1.4-123.1.6-123.1.7-123.2.0~rc2-123.2.0~rc3-123.2.0~rc3-223.2.0~rc3-323.2.0~rc4-123.2.1-123.3.0-123.3.0-223.3.0~rc1-123.3.0~rc2-123.3.0~rc3-123.3.0~rc4-123.3.0~rc5-123.3.1-123.3.1-1+exp123.3.1-223.3.1-323.3.1-423.3.2-123.3.2-223.3.3-123.3.3-223.3.3-323.3.4-123.3.5-124.0.0-124.0.0-224.0.0~rc1-124.0.0~rc2-124.0.0~rc3-124.0.1-124.0.2-124.0.3-124.0.4-1 |
None known |
mesaDebian:13 |
All versions, plus listed versions 25.0.7-225.0.7-2+deb13u125.1.0-125.1.5-125.1.7-1 Show 45 moreShow less25.2.0-125.2.1-125.2.1-225.2.2-125.2.3-125.2.3-1~bpo13+125.2.4-125.2.4-1~bpo13+125.2.4-1~bpo13+225.2.5-125.2.6-125.2.6-1~bpo13+125.2.7-125.2.8-125.2.8-225.3.0-125.3.0~rc1-125.3.0~rc2-125.3.0~rc4-125.3.1-125.3.2-125.3.2-225.3.3-126.0.0-126.0.0~rc3-126.0.1-126.0.1-226.0.2-126.0.3-126.0.4-126.0.5-126.0.6-126.0.7-126.0.8-126.1.0-126.1.0~rc1-126.1.0~rc2-126.1.0~rc3-126.1.2-126.1.2-1~bpo13+126.1.4-126.1.5-126.1.6-126.1.6-1~bpo13+126.2.0-1 |
None known |
mesaDebian:14 |
All versions, plus listed versions 25.0.7-225.1.0-125.1.5-125.1.7-125.2.0-1 Show 45 moreShow less25.2.1-125.2.1-225.2.2-125.2.3-125.2.3-1~bpo13+125.2.4-125.2.4-1~bpo13+125.2.4-1~bpo13+225.2.5-125.2.6-125.2.6-1~bpo13+125.2.7-125.2.8-125.2.8-225.3.0-125.3.0~rc1-125.3.0~rc2-125.3.0~rc4-125.3.1-125.3.2-125.3.2-225.3.3-126.0.0-126.0.0~rc3-126.0.1-126.0.1-226.0.2-126.0.3-126.0.4-126.0.5-126.0.6-126.0.7-126.0.8-126.1.0-126.1.0~rc1-126.1.0~rc2-126.1.0~rc3-126.1.2-126.1.2-1~bpo13+126.1.4-126.1.5-126.1.6-126.1.6-1~bpo13+126.2.0-126.2.0~rc1-1 |
None known |
MesaSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
Mesa-driversSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
MesaSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
Mesa-driversSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
MesaSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
Mesa-driversSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
MesaSUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
Show 31 moreShow less
| Package | Affected | Fixed |
|---|---|---|
Mesa-driversSUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 3 CVEs |
before 18.3.2-14.9.1 | 18.3.2-14.9.1 |
MesaSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 23.3.4-150600.83.3.1 | 23.3.4-150600.83.3.1 |
Mesa-driversSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 23.3.4-150600.83.3.1 | 23.3.4-150600.83.3.1 |
MesaSUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 3 CVEs |
before 23.3.4-150600.83.3.1 | 23.3.4-150600.83.3.1 |
Mesa-driversSUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 3 CVEs |
before 23.3.4-150600.83.3.1 | 23.3.4-150600.83.3.1 |
MesaopenSUSE:Leap 15.6 From an advisory covering 3 CVEs |
before 23.3.4-150600.83.3.1 | 23.3.4-150600.83.3.1 |
Mesa-driversopenSUSE:Leap 15.6 From an advisory covering 3 CVEs |
before 23.3.4-150600.83.3.1 | 23.3.4-150600.83.3.1 |
MesaSUSE:Linux Enterprise Micro 5.3 From an advisory covering 3 CVEs |
before 21.2.4-150400.68.15.1 | 21.2.4-150400.68.15.1 |
MesaSUSE:Linux Enterprise Micro 5.4 From an advisory covering 3 CVEs |
before 21.2.4-150400.68.15.1 | 21.2.4-150400.68.15.1 |
Mesa-driversSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 21.2.4-150400.68.15.1 | 21.2.4-150400.68.15.1 |
Mesa-driversSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 21.2.4-150400.68.15.1 | 21.2.4-150400.68.15.1 |
Mesa-driversSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 3 CVEs |
before 21.2.4-150400.68.15.1 | 21.2.4-150400.68.15.1 |
Mesa-driversSUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 3 CVEs |
before 21.2.4-150400.68.15.1 | 21.2.4-150400.68.15.1 |
MesaSUSE:Linux Enterprise Micro 5.5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversSUSE:Linux Enterprise Micro 5.5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
MesaSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
MesaSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversSUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
MesaopenSUSE:Leap Micro 5.5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversopenSUSE:Leap Micro 5.5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
MesaopenSUSE:Leap 15.5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
Mesa-driversopenSUSE:Leap 15.5 From an advisory covering 3 CVEs |
before 22.3.5-150500.77.5.1 | 22.3.5-150500.77.5.1 |
MesaSUSE:Linux Enterprise Micro 5.2 From an advisory covering 3 CVEs |
before 20.2.4-150300.59.9.1 | 20.2.4-150300.59.9.1 |
MesaSUSE:Linux Micro 6.0 From an advisory covering 3 CVEs |
before 23.3.4-8.1 | 23.3.4-8.1 |
Mesa-driversSUSE:Linux Micro 6.0 From an advisory covering 3 CVEs |
before 23.3.4-8.1 | 23.3.4-8.1 |
MesaSUSE:Linux Micro 6.1 From an advisory covering 3 CVEs |
before 23.3.4-slfo.1.1_2.1 | 23.3.4-slfo.1.1_2.1 |
Mesa-driversSUSE:Linux Micro 6.1 From an advisory covering 3 CVEs |
before 23.3.4-slfo.1.1_2.1 | 23.3.4-slfo.1.1_2.1 |
MesaopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 24.2.6-392.1 | 24.2.6-392.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-45913 is a medium vulnerability (CVSS 6.2) in Mesa3d Mesa, published March 27, 2024. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile.
References
gitlab.freedesktop.org/mesa/mesa/-/issues/9856
seclists.org/fulldisclosure/2024/Jan/28
packetstormsecurity.com/files/176800/Mesa-23.0.4-Null-Pointer.html
nvd.nist.gov/vuln/detail/CVE-2023-45913
github.com/advisories/GHSA-q4fq-56x3-rq98
Show 14 moreShow less
security-tracker.debian.org/tracker/CVE-2023-45913
suse.com/support/update/announcement/2024/suse-su-20243526-1
bugzilla.suse.com/1222040
Left out here: 144 versions. The JSON record has them.