A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules | Nov 28, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 15, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade dtb-armUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt | Jun 28, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-oem-6.1Upgrade linux-allwinnerUpgrade linux-starfiveUpgrade linux-kvmUpgrade linux-hwe-5.19Upgrade linux-azureUpgrade linux-lowlatency-hwe-5.19Upgrade linux-gcpUpgrade linux-ibmUpgrade linux-awsUpgrade linux-oracleUpgrade linux-allwinner-5.19Upgrade linux-gcp-5.19Upgrade linux-riscv-5.19Upgrade linux-riscvUpgrade linuxUpgrade linux-aws-5.19Upgrade linux-raspiUpgrade linux-starfive-5.19Upgrade linux-lowlatency | Nov 19, 2024 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub