REDHAT-BUG-2133455: Use After Free

Published Oct 10, 2022

Updated

A use-after-free vulnerability was found in the Linux kernel's vmwgfx driver in vmwcmdrescheck. Systems making use of the vmwgfx driver are potentially affected by this flaw. Exploiting the bug would require an attacker to have access to either /dev/dri/card0 or /dev/dri/rendererD128 and be able to issue an ioctl() on the resulting file descriptor. Under certain circumstances a local unprivileged user could use this flaw to crash the system, causing a denial of service.

Reference: https://bugzilla.openanolis.cn/showbug.cgi?id=2074

Affected Software

2 affected components

Linux Kernel

VMware vmwgfx driver

Event History

Oct 10, 2022

Data Sourced

via Red Hat·01:59 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2133455?

The severity of REDHAT-BUG-2133455 is considered significant due to the potential for exploitation by attackers with access to specific device files.

How do I fix REDHAT-BUG-2133455?

To fix REDHAT-BUG-2133455, you should update the Linux kernel and VMware vmwgfx driver to the latest patched versions provided by your vendor.

What systems are affected by REDHAT-BUG-2133455?

Systems using the Linux kernel with the vmwgfx driver are potentially affected by the vulnerability described in REDHAT-BUG-2133455.

What is a use-after-free vulnerability in the context of REDHAT-BUG-2133455?

A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.

What is the potential impact of exploiting REDHAT-BUG-2133455?

Exploiting REDHAT-BUG-2133455 could allow an attacker to gain elevated privileges or execute arbitrary code, compromising the affected system.