CVE-2023-33951

MEDIUM

6.7

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Details CVE

Score CVSS v3.16.7

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie7/24/2023

Derniere modification2/18/2026

Sourcenvd

Observations honeypot0

Produits affectes

linux:linux_kernelredhat:enterprise_linuxredhat:enterprise_linux_for_real_timeredhat:enterprise_linux_for_real_time_for_nfv

Faiblesses (CWE)

CWE-413CWE-362CWE-667

References

https://access.redhat.com/errata/RHSA-2023:6583(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:6901(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:7077(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2024:1404(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2024:4823(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2024:4831(secalert@redhat.com)

https://access.redhat.com/security/cve/CVE-2023-33951(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2218195(secalert@redhat.com)

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:6583(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2023:6901(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2023:7077(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2024:1404(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2024:4823(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2024:4831(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/security/cve/CVE-2023-33951(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=2218195(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.