Linux virtio_gpu_cmd_transfer_to_host_2d Buffer Overflow DoS

🗓️ 06 Feb 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

Vulnerability in virtio_gpu_cmd_transfer_to_host_2d() on Linux via NULL pointer, risking confidentiality and integrity.

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-023 (ALASKERNEL-5.10-2022-023)	8 Dec 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-2132)	6 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-2171)	6 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2021-4.0-0065	22 Jul 202100:00	–	nessus
Tenable Nessus	SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:0317-1)	30 Jan 202600:00	–	nessus
Tenable Nessus	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:0617-1)	28 Feb 202600:00	–	nessus
Tenable Nessus	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011199)	21 Apr 202600:00	–	nessus
Tenable Nessus	Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013697)	22 Apr 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-50842	31 Dec 202500:00	–	nessus
Amazon	Important: kernel	8 Dec 202200:00	–	amazon

Vulners

Node

OR

red_hat,red_hat_enterprise_linuxMatch7

red_hat,red_hat_enterprise_linuxMatch8

red_hat,red_hat_enterprise_linuxMatch9

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/f134f261d76ae3d5ecf68db642eaa746ceb84cfb
git	www.git.kernel.org/stable/c/f122bcb34f1a4b02ef3d95058d8fd1316ea03785
git	www.git.kernel.org/stable/c/989164305b933af06d69bb91044dafbd01025371
git	www.git.kernel.org/stable/c/36e133af33ea54193378b190cf92c47c12a43d34
git	www.git.kernel.org/linus/e473216b42aa1fd9fc6b94b608b42c210c655908
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.150
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.75
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.17
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.3

06 Feb 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 23.5

CVSS 34.5

EPSS0.00239

virtio gpu command linux vulnerability null pointer data confidentiality data integrity