CVE-2017-6210

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0

Description The issue allows local guest OS users to cause a denial of service by destroying context 0, resulting in a NULL pointer dereference and a QEMU process crash. This is due to a problem in the vrend decode reset function.

Recommendations For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the vrend decode reset function to prevent the destruction of context 0 until a patch is available.