CVEvulnerability

CVE-2023-33951

5.3 MEDIUM Published 2023-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-362, CWE-413, CWE-667

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Affected configurations

• linux linux kernel (<= 6.3.9) • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux for real time 8.0 • redhat enterprise linux for real time for nfv 8.0

Related

Weakness · CWE (3)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-413 Improper Resource Locking weakness
  • CWE-667 Improper Locking weakness

References