CVE-2023-33951

CVE	CVE-2023-33951
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-07-24 16:15:00 UTC
Updated	2023-11-14 21:15:00 UTC
Description	A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Problem Types: CWE-362

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All
Operating System	Redhat	Enterprise Linux	8.0	All	All	All
Operating System	Redhat	Enterprise Linux	9.0	All	All	All

Reference	Source	Link	Tags
Red Hat		access.redhat.com
Red Hat		access.redhat.com
ZDI-23-707 \| Zero Day Initiative	MISC	www.zerodayinitiative.com
2218195 – (CVE-2023-33951, ZDI-23-707, ZDI-CAN-20110) CVE-2023-33951 kernel: vmwgfx: race condition leading to information disclosure vulnerability	MISC	bugzilla.redhat.com
cve-details	MISC	access.redhat.com
Red Hat		access.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

161066 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-6583)
161147 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-7077)
242399 Red Hat Update for kernel security (RHSA-2023:6583)
242434 Red Hat Update for kernel-rt security (RHSA-2023:6901)
242451 Red Hat Update for kernel security (RHSA-2023:7077)
243087 Red Hat Update for kernel (RHSA-2024:1404)
755851 SUSE Enterprise Linux Security Update for the linux kernel (SUSE-SU-2023:2646-1)
907527 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (27761-1)
941453 AlmaLinux Security Update for kernel (ALSA-2023:7077)