CVE-2023-33951CWE-413

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

Medium · published July 24, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Weakness
CWE-413 · Improper Resource Locking
Published
2023-07-24T15:19Z
EPSS history
Timeline
  • 24 JUL 15:19Z
    Kernel: vmwgfx: race condition leading to information disclosure vulnerability
    cvelistv5