ZDI-CAN-23566: ZDI-24-1161: Linux Kernel vmwgfx Driver Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2024-36960.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23566?
The severity of ZDI-CAN-23566 is rated based on the potential impact of sensitive information disclosure in local environments.
How do I fix ZDI-CAN-23566?
To fix ZDI-CAN-23566, ensure that you update to the latest kernel version that addresses the vulnerability.
What systems are affected by ZDI-CAN-23566?
ZDI-CAN-23566 affects installations of the Linux Kernel, particularly those that allow high-privileged code execution.
How does ZDI-CAN-23566 impact system security?
ZDI-CAN-23566 can lead to the disclosure of sensitive data, potentially compromising the integrity of the system.
Who can exploit ZDI-CAN-23566?
Local attackers who can execute high-privileged code on a vulnerable system can potentially exploit ZDI-CAN-23566.