Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects
概要
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escal...
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の記録です。修正版は配布版ごとに違うので、リンク先で確かめてください。
- Debian DEBIAN-CVE-2023-33952 linux 修正版あり
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.
出典: CVE.org (CVE Program・cvelistV5) NVD
参照URL
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- patch bugzilla.redhat.com
- patch zerodayinitiative.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com