VULNERABILITY INTELLIGENCE

CVE-2023-33951

CVSS score6.7 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2023-07-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Weakness classification

  • secalert@redhat.com: CWE-413
  • nvd@nist.gov: CWE-362

Primary references