CVE-2016-10214

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0

Description The issue is related to a memory leak in the virgl resource attach backing function. This leak allows local guest OS users to cause a denial of service by consuming memory through a large number of VIRTIO GPU CMD RESOURCE ATTACH BACKING commands.

Recommendations For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the number of VIRTIO GPU CMD RESOURCE ATTACH BACKING commands that can be executed to minimize the risk of exploitation.