PT-2022-4756 · Linux+9 · Linux Kernel+9

Ezrak1E + 1 · Published 2022-09-08 · Updated 2025-04-03 · CVE-2022-38096

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference vulnerability was found in the vmwgfx driver in the GPU component of the Linux kernel. This issue is related to errors in pointer dereferencing and can be exploited by a local attacker with a user account on the system to gain privileges or cause a denial of service. The vulnerability is associated with the device file '/dev/dri/renderD128 (or Dxxx)'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:1607

ALSA-2024:2394

ALT-PU-2024-2275

AZL-10901

AZL-34861

BDU:2022-05656

CESA-2024_1607

CESA-2024_1614

CVE-2022-38096

DLA-3842-1

INFSA-2024_2394

OPENSUSE-SU-2023_0774-1

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

RHSA-2024:0930

RHSA-2024:1018

RHSA-2024:1019

RHSA-2024:1250

RHSA-2024:1268

RHSA-2024:1269

RHSA-2024:1306

RHSA-2024:1367

RHSA-2024:1382

RHSA-2024:1404

RHSA-2024:1607

RHSA-2024:1614

RHSA-2024:2394

RHSA-2024_1607

RHSA-2024_1614

RHSA-2024_2394

RLSA-2024:1607

RLSA-2024:1614

RXSA-2024:1607

SUSE-SU-2023:0747-1

SUSE-SU-2023:0749-1

SUSE-SU-2023:0749-2

SUSE-SU-2023:0762-1

SUSE-SU-2023:0767-1

SUSE-SU-2023:0768-1

SUSE-SU-2023:0770-1

SUSE-SU-2023:0774-1

SUSE-SU-2023:0778-1

SUSE-SU-2023:0779-1

SUSE-SU-2023:0780-1

SUSE-SU-2023:0852-1

SUSE-SU-2023:1608-1

SUSE-SU-2023:1609-1

SUSE-SU-2023:1710-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

SUSE-SU-2023_0762-1

SUSE-SU-2023_0770-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

USN-6898-1

USN-6898-2

USN-6898-3

USN-6898-4

USN-6917-1

USN-6919-1

USN-6927-1

USN-7019-1

USN-7173-1

USN-7173-2

USN-7173-3

USN-7195-1

USN-7195-2

USN-7413-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1875

• https://ubuntu.com/security/CVE-2024-36006 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35900 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53161 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-1607.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39480 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26973 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52699 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57910 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6927-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35958 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57902 · Vendor Advisory