CVE - CVE-2023-33952

CVE-ID
CVE-2023-33952	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:RHBZ#2218212 URL:https://bugzilla.redhat.com/show_bug.cgi?id=2218212 MISC:RHSA-2023:6583 URL:https://access.redhat.com/errata/RHSA-2023:6583 MISC:RHSA-2023:6901 URL:https://access.redhat.com/errata/RHSA-2023:6901 MISC:RHSA-2023:7077 URL:https://access.redhat.com/errata/RHSA-2023:7077 MISC:RHSA-2024:1404 URL:https://access.redhat.com/errata/RHSA-2024:1404 MISC:https://access.redhat.com/security/cve/CVE-2023-33952 URL:https://access.redhat.com/security/cve/CVE-2023-33952 MISC:https://www.zerodayinitiative.com/advisories/ZDI-CAN-20292 URL:https://www.zerodayinitiative.com/advisories/ZDI-CAN-20292
Assigning CNA
Red Hat, Inc.
Date Record Created
20230524	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20230524)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)