Wind River Support Network

HomeDefectsLIN1022-4655
Not to be fixed

LIN1022-4655 : Security Advisory - linux - CVE-2023-33952

Created: Jun 28, 2023    Updated: Sep 22, 2023
Resolved Date: Sep 22, 2023
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

A double-free vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of vmw_buffer_object objects. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. This flaw allows a local privileged user to escalate privileges and execute code in the context of the kernel.

https://nvd.nist.gov/vuln/detail/CVE-2023-33952
Live chat
Online