PT-2022-4755 · Linux+6 · Linux Kernel+6

Ezrak1E + 1 · Published 2021-07-20 · Updated 2025-10-23 · CVE-2022-36280

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory access vulnerability outside the limits (OOB) has been found in the vmwgfx driver in the Linux kernel, specifically in the drivers/gpu/vmxgfx/vmxgfx kms.c file. This issue is related to a buffer overflow in memory and can be exploited by a local attacker with a user account on the system to gain privileges, resulting in a denial of service (DoS). The vulnerability is associated with the device file "/dev/dri/renderD128 (or Dxxx)".

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

ALT-PU-2021-2284

ALT-PU-2021-2486

ALT-PU-2021-2616

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

BDU:2022-05655

CVE-2022-36280

DLA-3349-1

DLA-3403-1

DSA-5324-1

MGASA-2023-0007

MGASA-2023-0008

OESA-2023-1250

OESA-2023-1251

OESA-2023-1252

OESA-2023-1253

OPENSUSE-SU-2023_0488-1

OPENSUSE-SU-2023_0774-1

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2025_0201-1

OPENSUSE-SU-2025_0229-1

RHSA-2023:2148

RHSA-2023:2458

RHSA-2023_2148

RHSA-2023_2458

SUSE-SU-2023:0485-1

SUSE-SU-2023:0488-1

SUSE-SU-2023:0618-1

SUSE-SU-2023:0634-1

SUSE-SU-2023:0767-1

SUSE-SU-2023:0768-1

SUSE-SU-2023:0774-1

SUSE-SU-2023:0778-1

SUSE-SU-2023:0779-1

SUSE-SU-2023:0780-1

SUSE-SU-2023:0852-1

SUSE-SU-2023:1608-1

SUSE-SU-2023:1710-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

SUSE-SU-2023_0767-1

SUSE-SU-2025:0201-1

SUSE-SU-2025:0201-2

SUSE-SU-2025:0229-1

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

SUSE-SU-2025_0201-1

SUSE-SU-2025_0201-2

SUSE-SU-2025_03614-1

USN-5915-1

USN-5917-1

USN-5924-1

USN-5927-1

USN-5934-1

USN-5939-1

USN-5940-1

USN-5951-1

USN-5975-1

USN-5976-1

USN-5981-1

USN-5982-1

USN-5984-1

USN-5987-1

USN-5991-1

USN-6000-1

USN-6001-1

USN-6004-1

USN-6009-1

USN-6013-1

USN-6014-1

USN-6030-1

USN-6032-1

USN-6079-1

USN-6091-1

USN-6096-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 2062

• https://osv.dev/vulnerability/SUSE-SU-2023:0779-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5934-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20369 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3521 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1252 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-41218 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0229-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3903 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26606 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0634-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3435 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6000-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5924-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0201-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26545 · Vendor Advisory