Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-33951

Опубликовано: 24 июл. 2023
Источник: nvd
CVSS3: 6.7
CVSS3: 5.3
EPSS Низкий

Описание

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.3.9 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 0%
0.00005
Низкий

6.7 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-200
CWE-362

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 2 лет назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 6.7
redhat
почти 3 года назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 5.3
msrc
больше 2 лет назад

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

CVSS3: 6.7
debian
больше 2 лет назад

A race condition vulnerability was found in the vmwgfx driver in the L ...

CVSS3: 6.7
github
больше 2 лет назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

EPSS

Процентиль: 0%
0.00005
Низкий

6.7 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-200
CWE-362