CVE-2023-33951

MEDIUM

6.7

Descricao

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Detalhes CVE

Pontuacao CVSS v3.16.7

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosHIGH

Interacao do usuarioNONE

Publicado7/24/2023

Ultima modificacao2/18/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

linux:linux_kernelredhat:enterprise_linuxredhat:enterprise_linux_for_real_timeredhat:enterprise_linux_for_real_time_for_nfv

Fraquezas (CWE)

CWE-413CWE-362CWE-667

Referencias

https://access.redhat.com/errata/RHSA-2023:6583(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:6901(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:7077(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2024:1404(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2024:4823(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2024:4831(secalert@redhat.com)

https://access.redhat.com/security/cve/CVE-2023-33951(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2218195(secalert@redhat.com)

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:6583(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2023:6901(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2023:7077(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2024:1404(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2024:4823(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2024:4831(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/security/cve/CVE-2023-33951(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=2218195(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.