REDHAT-BUG-2133451: Integer Overflow
An integer overflow was found in the Linux kernel's vmwgfx driver. Systems making use of the vmwgfx driver are potentially affected by this flaw. Exploiting the bug would require an attacker to have access to either /dev/dri/card0 or /dev/dri/rendererD128 and be able to issue an ioctl() on the resulting file descriptor. Under certain circumstances a local unprivileged user could use this flaw to crash the system, causing a denial of service.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-36402 https://bugzilla.openanolis.cn/showbug.cgi?id=2072
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2133451?
The severity of REDHAT-BUG-2133451 is considered significant due to the potential for exploitation through integer overflow in the vmwgfx driver.
How do I fix REDHAT-BUG-2133451?
To fix REDHAT-BUG-2133451, update the Linux kernel and VMware vmwgfx driver to the latest patched versions that address this vulnerability.
What systems are affected by REDHAT-BUG-2133451?
Systems utilizing the Linux kernel with the vmwgfx driver are potentially affected by REDHAT-BUG-2133451.
Can REDHAT-BUG-2133451 be exploited remotely?
No, REDHAT-BUG-2133451 cannot be exploited remotely; an attacker must have local access to specific device files.
What is the nature of the vulnerability in REDHAT-BUG-2133451?
The nature of the vulnerability in REDHAT-BUG-2133451 is an integer overflow found in the Linux kernel's vmwgfx driver.