CVE-2022-0135: High severity freedesktop virglrenderer vulnerability
An out-of-bound write was found in virglrenderer in src/vrendrenderer.c:readtransferdata().
Other sources
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-0135?
CVE-2022-0135 is an out-of-bounds write vulnerability in the VirGL virtual OpenGL renderer (virglrenderer) that can result in a denial of service or possible code execution.
How does CVE-2022-0135 affect Virglrenderer Project Virglrenderer?
CVE-2022-0135 affects Virglrenderer Project Virglrenderer versions between 0.8.1 and 0.10.0.
How does CVE-2022-0135 impact Redhat Enterprise Linux 8?
CVE-2022-0135 affects Redhat Enterprise Linux 8.0.
How does CVE-2022-0135 impact Debian Debian Linux 10?
CVE-2022-0135 affects Debian Debian Linux 10.0.
What is the severity of CVE-2022-0135?
CVE-2022-0135 has a severity level of 7.8 (High).
How can I fix CVE-2022-0135?
To fix CVE-2022-0135, it is recommended to update Virglrenderer Project Virglrenderer to a version beyond 0.10.0, Redhat Enterprise Linux 8 to a version that includes the fix, or Debian Debian Linux 10 to a version that includes the fix.