REDHAT-BUG-2133452: Null Pointer Dereference

Published Oct 10, 2022

Updated

A NULL pointer dereference issue was found in the Linux kernel's vmwgfx driver in vmwcmddxdefinequery. Systems making use of the vmwgfx driver are potentially affected by this flaw. Exploiting the bug would require an attacker to have access to either /dev/dri/card0 or /dev/dri/rendererD128 and be able to issue an ioctl() on the resulting file descriptor. Under certain circumstances a local unprivileged user could use this flaw to crash the system, causing a denial of service.

Reference: https://bugzilla.openanolis.cn/showbug.cgi?id=2073

Affected Software

2 affected components

Linux Kernel

VMware vmwgfx driver

Event History

Oct 10, 2022

Data Sourced

via Red Hat·01:52 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2133452?

The severity of REDHAT-BUG-2133452 is considered critical due to potential exploitation leading to system crashes.

How do I fix REDHAT-BUG-2133452?

To fix REDHAT-BUG-2133452, update your Linux kernel and VMware vmwgfx driver to the latest version provided by your vendor.

Which systems are affected by REDHAT-BUG-2133452?

Systems utilizing the Linux kernel and VMware vmwgfx driver are potentially affected by REDHAT-BUG-2133452.

What type of vulnerability is REDHAT-BUG-2133452?

REDHAT-BUG-2133452 is a NULL pointer dereference vulnerability found in the vmwgfx driver.

What could be the impact of exploiting REDHAT-BUG-2133452?

Exploiting REDHAT-BUG-2133452 could allow an attacker to crash the system or potentially execute arbitrary code.