REDHAT-BUG-1420246: Null Pointer Dereference

Published Feb 8, 2017
·
Updated

Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to a null pointer dereference issue. It could occur when a guest invokes a virgl 'VIRGLCCMDCLEAR' command.

A guest user/process could use this flaw to crash Qemu process resulting in DoS.

Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=48f67f60967f963b698ec8df57ec6912a43d6282

Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/08/5

Affected Software

2 affected components
Freedesktop Virglrenderer
Qemu Qemu

Event History

Feb 8, 2017
Data Sourced
via Red Hat·09:46 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-1420246?

The vulnerability REDHAT-BUG-1420246 has a high severity as it can lead to a denial of service (DoS) by crashing the QEMU process.

2

How does the vulnerability REDHAT-BUG-1420246 occur?

The REDHAT-BUG-1420246 vulnerability occurs when a guest invokes the virgl 'VIRGL_CCMD_CLEAR' command, leading to a null pointer dereference.

3

Which software is affected by REDHAT-BUG-1420246?

The software affected by REDHAT-BUG-1420246 includes FreeDesktop Virglrenderer and QEMU.

4

How can I mitigate the risks associated with REDHAT-BUG-1420246?

To mitigate the risks of REDHAT-BUG-1420246, it is recommended to update to the patched versions of Virglrenderer and QEMU as provided by the vendors.

5

Is there any workaround for REDHAT-BUG-1420246?

As of now, the best practice is to avoid using the specific virgl 'VIRGL_CCMD_CLEAR' command until an official patch is applied for REDHAT-BUG-1420246.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203