A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-debug-modules-extra | Nov 28, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 8, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kselftests-kmp-default | Jun 28, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-azureUpgrade linux-awsUpgrade linux-hwe-5.19Upgrade linux-ibmUpgrade linux-allwinner-5.19Upgrade linux-riscv-5.19Upgrade linux-allwinnerUpgrade linux-starfiveUpgrade linux-gcp-5.19Upgrade linux-oem-6.1Upgrade linux-gcpUpgrade linux-lowlatency-hwe-5.19Upgrade linux-aws-5.19Upgrade linux-lowlatencyUpgrade linux-starfive-5.19Upgrade linux-raspiUpgrade linuxUpgrade linux-riscv | Nov 19, 2024 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub