Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-33951

Опубликовано: 24 июл. 2023
Источник: debian
EPSS Низкий

Описание

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed6.1.15-1package
linuxnot-affectedbullseyepackage
linuxnot-affectedbusterpackage

Примечания

  • https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/

  • https://git.kernel.org/linus/9ef8d83e8e25d5f1811b3a38eb1484f85f64296c (6.4-rc1)

EPSS

Процентиль: 0%
0.00005
Низкий

Связанные уязвимости

CVSS3: 6.7
ubuntu
почти 2 года назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 6.7
redhat
больше 2 лет назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 6.7
nvd
почти 2 года назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 5.3
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 6.7
github
почти 2 года назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

EPSS

Процентиль: 0%
0.00005
Низкий
Уязвимость CVE-2023-33951