An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 16, 2024 | Sep 16, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 16, 2022 |
| Oracle_linux | — | Upgrade kernel | Mar 7, 2024 | Sep 9, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 22, 2024 | Sep 16, 2022 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-baseUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-vanillaUpgrade kernel-default-extraUpgrade dtb-zteUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-alUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-debug-baseUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-vanilla-devel | Sep 20, 2023 | Sep 16, 2022 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-262-genericUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1102-gkeop | Nov 4, 2024 | Sep 16, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub