PT-2022-5104

CVE-2022-36402

·

Published

2022-09-09

·

Updated

2025-01-09

Description by

CVSS 3.1
6.3
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An integer overflow vulnerability was found in the vmwgfx driver in the GPU component of the Linux kernel. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service (DoS). The vulnerability is related to the device file '/dev/dri/renderD128 (or Dxxx)' and the file 'vmxgfx execbuf.c' in the 'drivers/gpu/vmxgfx' directory.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
CESA-2024_0113
CESA-2024_0134
OPENSUSE-SU-2023_3680-1
OPENSUSE-SU-2023_3684-1
RHSA-2024:0113
RHSA-2024_0113
RHSA-2024:0134
RHSA-2024_0134
RHSA-2024:0461
RHSA-2024_0461
RHSA-2024:0930
RHSA-2024:1404
RHSA-2024:4823
RHSA-2024:4831
SUSE-SU-2023:3601-1
SUSE-SU-2023_3601-1
SUSE-SU-2023:3680-1
SUSE-SU-2023_3680-1
SUSE-SU-2023:3681-1
SUSE-SU-2023_3681-1
SUSE-SU-2023:3684-1
SUSE-SU-2023:3687-1
SUSE-SU-2023:3705-1
SUSE-SU-2023_3705-1
SUSE-SU-2023:3785-1
USN-7088-1
USN-7088-2
USN-7088-3
USN-7088-4
USN-7088-5
USN-7119-1
USN-7183-1
USN-7184-1
USN-7185-1
USN-7185-2
Found an issue in the description? Have something to add? Feel free to write us 👾