An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 16, 2024 | Sep 16, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 16, 2022 |
| Oracle_linux | — | Upgrade kernel | Mar 7, 2024 | Sep 9, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Feb 22, 2024 | Sep 16, 2022 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-vanilla-develUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-64kbUpgrade kernel-symsUpgrade dtb-zteUpgrade kernel-kvmsmall-baseUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade dtb-alUpgrade kernel-vanilla-baseUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-preempt-develUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-docsUpgrade reiserfs-kmp-default | Sep 20, 2023 | Sep 16, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1177-awsUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-oemUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-262-genericUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-xilinx-zynqmp | Nov 4, 2024 | Sep 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub