VulnerabilityModified
CVE-2023-33952
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel.
MEDIUM 6.7EPSS 0.46%
Does this matter?
Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.
Description
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.46% probability · 39th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-415
- Affected
- linux/linux kernel · redhat/enterprise linux · redhat/enterprise linux for real time · redhat/enterprise linux for real time for nfv
- Source
- secalert@redhat.com
References
- https://access.redhat.com/errata/RHSA-2023:6583Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6901Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7077Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1404
- https://access.redhat.com/errata/RHSA-2024:4823
- https://access.redhat.com/errata/RHSA-2024:4831
- https://access.redhat.com/security/cve/CVE-2023-33952Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2218212Issue Tracking, Patch, Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-CAN-20292Patch, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2023:6583Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:6901Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7077Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1404
- https://access.redhat.com/errata/RHSA-2024:4823
- https://access.redhat.com/errata/RHSA-2024:4831
- https://access.redhat.com/security/cve/CVE-2023-33952Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2218212Issue Tracking, Patch, Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-CAN-20292Patch, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.