Bug 2218195 (CVE-2023-33951, ZDI-23-707, ZDI-CAN-20110) - CVE-2023-33951 kernel: vmwgfx: race condition leading to information disclosure vulnerability
Summary: CVE-2023-33951 kernel: vmwgfx: race condition leading to information disclosu...
Keywords:
Status: NEW
Alias: CVE-2023-33951, ZDI-23-707, ZDI-CAN-20110
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2218197 2218198 2218199 2218200
Blocks: 2218114
TreeView+ depends on / blocked
 
Reported: 2023-06-28 12:16 UTC by Mauro Matteo Cascella
Modified: 2024-03-19 17:27 UTC (History)
46 users (show)

Fixed In Version: kernel 6.4-rc1
Doc Type: If docs needed, set a value
Doc Text:
A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2023:6835 0 None None None 2023-11-09 07:11:00 UTC
Red Hat Product Errata RHBA-2023:7268 0 None None None 2023-11-15 18:24:57 UTC
Red Hat Product Errata RHBA-2023:7328 0 None None None 2023-11-16 11:39:07 UTC
Red Hat Product Errata RHBA-2023:7338 0 None None None 2023-11-16 18:04:31 UTC
Red Hat Product Errata RHBA-2023:7343 0 None None None 2023-11-20 01:59:02 UTC
Red Hat Product Errata RHBA-2023:7346 0 None None None 2023-11-20 09:26:01 UTC
Red Hat Product Errata RHSA-2023:6583 0 None None None 2023-11-07 08:20:37 UTC
Red Hat Product Errata RHSA-2023:6901 0 None None None 2023-11-14 15:15:49 UTC
Red Hat Product Errata RHSA-2023:7077 0 None None None 2023-11-14 15:21:12 UTC
Red Hat Product Errata RHSA-2024:1404 0 None None None 2024-03-19 17:27:24 UTC

Description Mauro Matteo Cascella 2023-06-28 12:16:22 UTC 
A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. Quoting ZDI security advisory [1]:

"This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the handling of GEM objects. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to disclose information in the context of the kernel."

[1] https://www.zerodayinitiative.com/advisories/ZDI-CAN-20110/
Comment 4 Mauro Matteo Cascella 2023-06-28 12:56:17 UTC 
Upstream fix:
https://github.com/torvalds/linux/commit/9ef8d83
Comment 6 errata-xmlrpc 2023-11-07 08:20:33 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:6583 https://access.redhat.com/errata/RHSA-2023:6583
Comment 7 errata-xmlrpc 2023-11-14 15:15:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:6901 https://access.redhat.com/errata/RHSA-2023:6901
Comment 8 errata-xmlrpc 2023-11-14 15:21:09 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7077 https://access.redhat.com/errata/RHSA-2023:7077
Comment 11 errata-xmlrpc 2024-03-19 17:27:21 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1404 https://access.redhat.com/errata/RHSA-2024:1404
Note You need to log in before you can comment on or make changes to this bug.