CVE-2023-33952 is a double-free vulnerability in the vmwgfx driver of the Linux kernel used by Red Hat Enterprise Linux 8. It arises from improper validation before freeing vmw_buffer_object objects, allowing a local privileged user to escalate privileges and execute code in kernel context. The vulnerability has a CVSS score of 6.7, indicating medium severity, with high impact on confidentiality, integrity, and availability but requiring local privileged access and no user interaction. No known exploits are currently reported in the wild. European organizations using RHEL 8 systems with the vmwgfx driver are at risk, especially those in critical infrastructure and government sectors. Mitigation involves applying vendor patches promptly, auditing local user privileges, and monitoring for suspicious kernel activity. Countries with significant Red Hat Enterprise Linux adoption and strategic IT infrastructure, such as Germany, France, the UK, and the Netherlands, are most likely affected.
