CVE-2023-33951

Katalog CVE

CVSS 5.3 · Medium EPSS 0,34%

Kerentanan Improper Resource Locking pada linux kernel, redhat enterprise linux +2 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Rincian

Terbit di NVD

24 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-413: Improper Resource Locking
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-667: Improper Locking

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 26,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2218195 issue tracking · patch
• https://access.redhat.com/errata/RHSA-2023:6583 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:6901 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7077 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-33951 advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/ advisory pihak ketiga · vdb entry
• https://access.redhat.com/errata/RHSA-2024:1404
• https://access.redhat.com/errata/RHSA-2024:4823
• https://access.redhat.com/errata/RHSA-2024:4831