CVE-2022-0135
25.08.2022, 18:15
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| virglrenderer_project | virglrenderer | 0.8.1 ≤ 𝑥 < 0.10.0 |
| redhat | enterprise_linux | 8.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| virglrenderer |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libvirglrenderer0 |
| ||||||||||||||||||||||||||||||||
| libvirglrenderer1 |
| ||||||||||||||||||||||||||||||||
| virglrenderer-devel |
|
Common Weakness Enumeration
References