Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-33952

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.0-513.5.1.rt7.307.el8_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.0-513.5.1.el8_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 0:4.18.0-477.51.1.el8_8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:5.14.0-362.8.1.el9_3 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:5.14.0-362.8.1.el9_3 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:5.14.0-284.75.1.el9_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:5.14.0-284.75.1.rt14.360.el9_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References