1. Home
  2. Vulnerabilities
  3. CVE-2023-33952

CVE-2023-33952

CVSS v3.1 6.7 (Medium)
67% Progress
EPSS 0.04 % (17th)
0.04% Progress
Affected Products 4
Advisories 10
NVD Status Modified
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

Weaknesses
CWE-415
Double Free
Related CVEs
CVE Status
PUBLISHED
NVD Status
Modified
CNA
Red Hat, Inc.
Published Date
2023-07-24 16:15:11
(14 months ago)
Updated Date
2024-07-24 16:15:05
(7 weeks ago)

Affected Products

Linux

Redhat

Configuration #1

    CPE23 From Up To
  Linux Kernel 6.3.9 and prior versions cpe:2.3:o:linux:linux_kernel <= 6.3.9

Configuration #2

    CPE23 From Up To
  Redhat Enterprise Linux 8.0 cpe:2.3:o:redhat:enterprise_linux:8.0
  Redhat Enterprise Linux 9.0 cpe:2.3:o:redhat:enterprise_linux:9.0
  Redhat Enterprise Linux for Real Time 8.0 cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0
  Redhat Enterprise Linux for Real Time For Nfv 8.0 cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0