REDHAT-BUG-1422438: Low severity libvirglrenderer vulnerability
Virgil 3d project, used by Quick Emulator(Qemu) to implement 3D GPU support for the virtio GPU, is vulnerable to memory leakage issue. It could occur when a guest tries to initialise blitter context via 'VIRGLCCMDBLIT' command.
A guest user/process could use this flaw to leak host memory resulting in DoS.
Upstream patch: --------------- -> https://cgit.freedesktop.org/virglrenderer/commit/?id=6eb13f7a2dcf391ec9e19b4c2a79e68305f63c22
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/15/7
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1422438?
The severity of REDHAT-BUG-1422438 is classified as a vulnerability that can lead to memory leakage.
How do I fix REDHAT-BUG-1422438?
To fix REDHAT-BUG-1422438, you should patch your installations of virglrenderer and QEMU with the latest updates provided by the vendor.
What causes REDHAT-BUG-1422438?
REHAT-BUG-1422438 is caused by a memory leakage issue when a guest initializes the blitter context using the 'VIRGL_CCMD_BLIT' command.
Who is affected by REDHAT-BUG-1422438?
REDHAT-BUG-1422438 affects users of the Freedesktop virglrenderer and Quick Emulator QEMU that utilize 3D GPU support for virtio GPU.
What are the potential impacts of REDHAT-BUG-1422438?
The potential impacts of REDHAT-BUG-1422438 include the unintentional leaking of host memory, which can lead to data exposure.