Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-33951

Опубликовано: 24 июл. 2023
Источник: nvd
CVSS3: 6.7
CVSS3: 5.3
EPSS Низкий

Описание

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.3.9 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.0034
Низкий

6.7 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-413
CWE-362

Связанные уязвимости

CVSS3: 6.7
ubuntu
почти 3 года назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 6.7
redhat
больше 3 лет назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS3: 5.3
msrc
почти 3 года назад

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

CVSS3: 6.7
debian
почти 3 года назад

A race condition vulnerability was found in the vmwgfx driver in the L ...

CVSS3: 6.7
github
почти 3 года назад

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

EPSS

Процентиль: 26%
0.0034
Низкий

6.7 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-413
CWE-362