MEDIUM🇵🇱 Wersja polska

CVE-2023-33951

CVSS 6.7v3.1pub. 2023-07-24upd. 2026-02-18

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

  • Linux Kernel

    OS
    Linux
    ≤ 6.3.9

  • Red Hat Enterprise Linux

    OS
    Redhat
    8.09.0

  • Red Hat Enterprise Linux For Real Time

    OS
    Redhat
    8.0

  • Red Hat Enterprise Linux For Real Time For Nfv

    OS
    Redhat
    8.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPERace Condition
CWE
References

Related vulnerabilities

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2022-47986CRITICAL9.8⚠ KEVten sam produkt

IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on t...

CVE-2022-22954CRITICAL9.8⚠ KEVten sam produkt

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-s...