CVE-2023-33951

Published: Jul 24, 2023

Modified: Feb 18, 2026

PUBLISHED

CVSS v3.1

6.7

MEDIUM

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:4.18.0-513.5.1.rt7.307.el8_9 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:4.18.0-513.5.1.el8_9 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected `0:4.18.0-477.51.1.el8_8 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:5.14.0-362.8.1.el9_3 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:5.14.0-362.8.1.el9_3 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:5.14.0-284.75.1.el9_2 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:5.14.0-284.75.1.rt14.360.el9_2 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions