REDHAT-BUG-1765578: Null Pointer Dereference

Q: What is the severity of REDHAT-BUG-1765578?

The vulnerability has the potential to cause a denial of service due to a NULL pointer dereference.

Q: How do I fix REDHAT-BUG-1765578?

To mitigate REDHAT-BUG-1765578, upgrade to virglrenderer version 0.8.0 or later.

Q: Who is affected by REDHAT-BUG-1765578?

Guest OS users utilizing versions of virglrenderer prior to 0.8.0 are affected.

Q: What causes REDHAT-BUG-1765578?

This vulnerability is caused by malformed commands leading to a NULL pointer dereference in vrend_renderer.c.

Q: Is there a workaround for REDHAT-BUG-1765578?

Disabling the use of virglrenderer until an upgrade can be performed is a potential temporary workaround.

Published Oct 25, 2019

Updated

A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.

Upstream Issue:

https://gitlab.freedesktop.org/virgl/virglrenderer/mergerequests/314/diffs?commitid=d2cdbcf6a8f2317f250fd54f08aa35dde2fa3e30#3cd772559e0d73afa136d6818023cfd0c4c8ecc00589

Affected Software

1 affected component

Freedesktop Virglrenderer<0.8.0

Event History

Oct 25, 2019

Data Sourced

via Red Hat·01:26 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1765578?

The vulnerability has the potential to cause a denial of service due to a NULL pointer dereference.

How do I fix REDHAT-BUG-1765578?

To mitigate REDHAT-BUG-1765578, upgrade to virglrenderer version 0.8.0 or later.

Who is affected by REDHAT-BUG-1765578?

Guest OS users utilizing versions of virglrenderer prior to 0.8.0 are affected.

What causes REDHAT-BUG-1765578?

This vulnerability is caused by malformed commands leading to a NULL pointer dereference in vrend_renderer.c.

Is there a workaround for REDHAT-BUG-1765578?