CVE-2023-33951

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

References

https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/

https://bugzilla.redhat.com/show_bug.cgi?id=2218195

https://access.redhat.com/security/cve/CVE-2023-33951

https://access.redhat.com/errata/RHSA-2024:1404

https://access.redhat.com/errata/RHSA-2023:7077

https://access.redhat.com/errata/RHSA-2023:6901

https://access.redhat.com/errata/RHSA-2023:6583

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3