HomeDefectsLIN1023-1152
Fixed

LIN1023-1152 : Security Advisory - linux - CVE-2023-33952

Created: Jun 28, 2023    Updated: Aug 10, 2023
Resolved Date: Jun 30, 2023
Found In Version: 10.23.30.1
Fix Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

A double-free vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of vmw_buffer_object objects. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. This flaw allows a local privileged user to escalate privileges and execute code in the context of the kernel.

https://nvd.nist.gov/vuln/detail/CVE-2023-33952

CVEs