← CVE Intelligence

CVE-2023-33951

Kernel: vmwgfx: race condition leading to information disclosure vulnerability PUBLISHED

Description (CNA)

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.5.1.rt7.307.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.5.1.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.51.1.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.8.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.8.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.75.1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.75.1.rt14.360.el9_2 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-413

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.