CVE-2023-33952: Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects
A double free vulnerability was found in the vmwgfx driver in the Linux kernel. Quoting ZDI security advisory [1]:
"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the handling of vmwbufferobject objects. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel."
[1] https://www.zerodayinitiative.com/advisories/ZDI-CAN-20292/
Other sources
A double-free vulnerability was found in handling vmwbufferobject objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.
— NVD
A double-free vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of vmwbufferobject objects. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. This flaw allows a local privileged user to escalate privileges and execute code in the context of the kernel.
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a double free in the handling of vmwbufferobject objects. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges and execute code in the context of the kernel.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.4 - Compensating control
Mitigate CVE/ZDI-CAN-20292 by preventing the affected `vmwgfx` kernel module from being loaded (blacklist the `vmwgfx` kernel module per Red Hat solution 41278).
Event History
Frequently Asked Questions
What is CVE-2023-33952?
CVE-2023-33952 is a vulnerability in the Linux Kernel vmwgfx Driver that allows local attackers to escalate privileges on affected installations of Linux Kernel.
How does CVE-2023-33952 affect Linux Kernel?
CVE-2023-33952 affects Linux Kernel by allowing local attackers to escalate privileges.
What is the severity of CVE-2023-33952?
The severity of CVE-2023-33952 is rated as high, with a severity score of 8.2.
How can CVE-2023-33952 be exploited?
To exploit CVE-2023-33952, an attacker must first obtain the ability to execute high-privileged code on the target system.
How can I fix the vulnerability CVE-2023-33952 in Linux Kernel?
To fix the vulnerability CVE-2023-33952 in Linux Kernel, it is recommended to apply the relevant patch provided by the Linux Kernel project.