high7.8
CVE-2022-0135
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer).
Impact
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virglrenderer Project | Virglrenderer | from 0.8.1 before 0.10.0 |
| Redhat | Enterprise Linux | Version 8.0 |
| Debian | Debian Linux | Version 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=2037790
- https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
- https://security.gentoo.org/glsa/202210-05
- https://bugzilla.redhat.com/show_bug.cgi?id=2037790
- https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
- https://security.gentoo.org/glsa/202210-05