ZDI-24-1161: Linux Kernel vmwgfx Driver Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2024-36960.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1161?
ZDI-24-1161 is classified as a high-severity vulnerability due to its potential to allow local attackers to disclose sensitive information.
How do I fix ZDI-24-1161?
To fix ZDI-24-1161, you should apply the latest security updates and patches provided by your Linux distribution.
What systems are affected by ZDI-24-1161?
ZDI-24-1161 affects installations of the Linux Kernel that can execute high-privileged code.
Can ZDI-24-1161 be exploited remotely?
No, ZDI-24-1161 requires the attacker to have local access and the ability to execute high-privileged code on the target system.
What type of information can be disclosed by exploiting ZDI-24-1161?
Exploitation of ZDI-24-1161 can lead to the disclosure of sensitive information stored on the affected system.