Orta CVSS 6.7

CVE-2023-33952: Linux Kernel: güvenlik açığı

Yayın: 24 Temmuz 2023 19:15 · Güncelleme: 7 Kasım 2026 00:27

Açıklama (NVD)

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-415
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	6.3.9	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux-for-real-time	8.0	8.0	—
redhat-enterprise-linux-for-real-time-for-nfv	8.0	8.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları