CVE-2023-33952

Katalog CVE

CVSS 6.7 · Medium EPSS 0,46%

Kerentanan Double Free pada linux kernel, redhat enterprise linux +2 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

Rincian

Terbit di NVD

24 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 38,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2218212 issue tracking · patch · advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-20292 patch · advisory pihak ketiga · vdb entry
• https://access.redhat.com/errata/RHSA-2023:6583 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:6901 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7077 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-33952 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:1404
• https://access.redhat.com/errata/RHSA-2024:4823
• https://access.redhat.com/errata/RHSA-2024:4831