CVE-2024-35810

A vulnerability was found in the drm/vmwgfx driver in the Linux kernel, concerning the lifetime management of the buffer object (BO) cursor memory. This issue occurs due to improper handling of the cursor memory's lifecycle, which could lead to use-after-free errors or crashes.

This vulnerability is rated as having a Moderate impact because it requires local access with existing privileges and specifically targets virtual machines running the VMware virtual graphics adapter, limiting the failure domain primarily to denial of service through a system crash. In typical Red Hat Enterprise Linux deployments, the VMware DRM graphics module is only utilized within VMware virtual guest environments that configure graphical displays. Non-virtualized bare-metal systems, cloud environments using other hypervisors, and headless server installations that do not load this driver are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.