CVE-2022-0175: Medium severity Virglrenderer Project Virglrenderer vulnerability
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure.
Other sources
The virgl forgets to initialize the memory pointed by the res->ptr when it creates resource. And the memory can be mapped to the guest kernel when the VIRTIOGPUCMDRESOURCEATTACHBACKING is issued. However, the guest userspace can read the data in the unintialized host memory by mmaping it from the guest kernel.
Upstream fix:
https://gitlab.freedesktop.org/virgl/virglrenderer/-/commit/b05bb61f454eeb8a85164c8a31510aeb9d79129c
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-0175?
CVE-2022-0175 is a vulnerability found in the VirGL virtual OpenGL renderer (virglrenderer) that allows a malicious guest to read uninitialized memory from the host.
What is the severity of CVE-2022-0175?
The severity of CVE-2022-0175 is medium with a CVSS score of 5.5.
How does CVE-2022-0175 affect the Virglrenderer software?
CVE-2022-0175 affects Virglrenderer versions 0.9.0 and 0.9.1.
How can I fix CVE-2022-0175 in Virglrenderer?
To fix CVE-2022-0175 in Virglrenderer, update to version 0.10.4-1 or higher.
Are there any references for CVE-2022-0175?
Yes, you can find references for CVE-2022-0175 at the following URLs: [Link 1](https://gitlab.freedesktop.org/virgl/virglrenderer/-/commit/b05bb61f454eeb8a85164c8a31510aeb9d79129c), [Link 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2039343), [Link 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2039342).