CVE-2023-33951— Kernel: vmwgfx: race condition leading to information disclosure vulnerability
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 8
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在对象执行操作时缺乏正确的锁定，攻击者可以利用此漏洞泄露内核上下文中的信息。
Possible ATT&CK Techniques 1 AI
T1003.001 · LSASS Memory
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-33951
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kernel: vmwgfx: race condition leading to information disclosure vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
资源加锁不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在对象执行操作时缺乏正确的锁定，攻击者可以利用此漏洞泄露内核上下文中的信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 ~ * |
cpe:/a:redhat:enterprise_linux:8::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.5.1.el8_9 ~ * |
cpe:/o:redhat:enterprise_linux:8::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:4.18.0-477.51.1.el8_8 ~ * |
cpe:/a:redhat:rhel_eus:8.8::crb
|
|
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.8.1.el9_3 ~ * |
cpe:/a:redhat:enterprise_linux:9::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.8.1.el9_3 ~ * |
cpe:/a:redhat:enterprise_linux:9::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.75.1.el9_2 ~ * |
cpe:/o:redhat:rhel_eus:9.2::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.75.1.rt14.360.el9_2 ~ * |
cpe:/a:redhat:rhel_eus:9.2::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2023-33951
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-33951
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-33951 (8)
-
-
-
-
🔗 RHSA-2023:6583 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
-
-
Same Patch Batch · Red Hat · 2023-07-24 · 10 CVEs total
| CVE-2023-3812 | 7.8 HIGH | Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags |
| CVE-2023-38200 | 7.5 HIGH | Keylime: registrar is subject to a dos against ssl connections |
| CVE-2023-3567 | 7.1 HIGH | Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race |
| CVE-2023-3640 | 7.0 HIGH | Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets func |
| CVE-2023-33952 | 6.7 MEDIUM | Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects |
| CVE-2023-3750 | 6.5 MEDIUM | Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service |
| CVE-2023-3019 | 6.0 MEDIUM | Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() |
| CVE-2023-3745 | 5.5 MEDIUM | Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h |
| CVE-2023-3384 | 5.4 MEDIUM | Quay: stored cross site scripting |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 8
-
CVE-2026-91926
Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_ -
CVE-2026-74859
Gnome-tweaks: path traversal in theme installer -
CVE-2026-16445
Dracut: dracut: root code execution via dhcp options command -
CVE-2026-58380
Gimp: gimp: stack buffer overflow in pnmscanner_gettoken() -
CVE-2026-54231
Abrt: unsanitized systemd journal content written to dump di
Same vendor: Red Hat
-
CVE-2026-103754
Ansible-runner: ansible-runner: path traversal and symlink e -
CVE-2026-96577
Oc-mirror__release-4.21: embedded local cache registry liste -
CVE-2026-83589
Oauth-proxy: open redirect via /\ and /\t bypass in post-log -
CVE-2026-103641
Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr u -
CVE-2026-103399
Libsoup: soupserver: http/1 request smuggling via undrained
Same weakness: CWE-413
-
CVE-2026-92615
Flightctl: flightctl: package-global go-git https transport -
CVE-2026-44608
Use after free and crash under special conditions in RPZ cod -
CVE-2026-32748
Squid has Denial of Service in ICP Response handling -
CVE-2025-0003
AMD Xilinx Run Time 安全漏洞 -
CVE-2025-3450
Automation Runtime SDM requests may impact system
V. Comments for CVE-2023-33951
No comments yet