CVE-2023-33951

medium

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

References

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/

https://bugzilla.redhat.com/show_bug.cgi?id=2218195

https://access.redhat.com/security/cve/CVE-2023-33951

https://access.redhat.com/errata/RHSA-2024:4831

https://access.redhat.com/errata/RHSA-2024:4823

https://access.redhat.com/errata/RHSA-2024:1404

https://access.redhat.com/errata/RHSA-2023:7077

https://access.redhat.com/errata/RHSA-2023:6901

https://access.redhat.com/errata/RHSA-2023:6583

Details

Source: Mitre, NVD

Published: 2023-07-24

Updated: 2024-07-24

Risk Information

CVSS v2

Base Score: 3.7

Vector: CVSS2#AV:L/AC:H/Au:M/C:C/I:N/A:N

Severity: Low

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Severity: Medium