Vulnerabilities > CVE-2022-0135
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 | |
| OS | 1 | |
| OS | 1 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2037790
- https://bugzilla.redhat.com/show_bug.cgi?id=2037790
- https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
- https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
- https://security.gentoo.org/glsa/202210-05
- https://security.gentoo.org/glsa/202210-05