vulnerability

Red Hat: CVE-2023-33951: kernel: vmwgfx: race condition leading to information disclosure vulnerability (Multiple Advisories)

Severity
4
CVSS
(AV:L/AC:M/Au:M/C:C/I:N/A:N)
Published
Jul 24, 2023
Added
Nov 8, 2023
Modified
Mar 11, 2025

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Solution(s)

redhat-upgrade-kernelredhat-upgrade-kernel-rt
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.