CVEvulnerability

CVE-2023-33952

6.7 MEDIUM Published 2023-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-415

Description

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

Affected configurations

• linux linux kernel (<= 6.3.9) • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux for real time 8.0 • redhat enterprise linux for real time for nfv 8.0

Related

Weakness · CWE (1)

References