PT-2022-5104 · Linux+6 · Linux Kernel+6

Ezrak1E

+1

·

Published

2022-09-09

·

Updated

2025-01-09

·

CVE-2022-36402

CVSS v3.1

6.3

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An integer overflow vulnerability was found in the vmwgfx driver in the GPU component of the Linux kernel. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service (DoS). The vulnerability is related to the device file '/dev/dri/renderD128 (or Dxxx)' and the file 'vmxgfx execbuf.c' in the 'drivers/gpu/vmxgfx' directory.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-118CWE-190

Related Identifiers

BDU:2022-06342
CESA-2024_0113
CESA-2024_0134
CVE-2022-36402
OPENSUSE-SU-2023_3680-1
OPENSUSE-SU-2023_3684-1
RHSA-2024:0113
RHSA-2024:0134
RHSA-2024:0461
RHSA-2024:0930
RHSA-2024:1404
RHSA-2024:4823
RHSA-2024:4831
RHSA-2024_0113
RHSA-2024_0134
RHSA-2024_0461
SUSE-SU-2023:3601-1
SUSE-SU-2023:3680-1
SUSE-SU-2023:3681-1
SUSE-SU-2023:3684-1
SUSE-SU-2023:3687-1
SUSE-SU-2023:3705-1
SUSE-SU-2023:3785-1
SUSE-SU-2023_3601-1
SUSE-SU-2023_3680-1
SUSE-SU-2023_3681-1
SUSE-SU-2023_3705-1
USN-7088-1
USN-7088-2
USN-7088-3
USN-7088-4
USN-7088-5
USN-7119-1
USN-7183-1
USN-7184-1
USN-7185-1
USN-7185-2

Affected Products

Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu